CVE-2024-36504

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-36504
An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL.

6.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-23-473 Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
History

22 Jul 2025, 21:26

Type Values Removed Values Added
References () https://fortiguard.fortinet.com/psirt/FG-IR-23-473 - () https://fortiguard.fortinet.com/psirt/FG-IR-23-473 - Vendor Advisory
First Time Fortinet
Fortinet fortios
CPE cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

18 Feb 2025, 22:15

Type Values Removed Values Added
Summary
  • (es) Una vulnerabilidad de lectura fuera de los límites [CWE-125] en las versiones 7.4.0 a 7.4.4, 7.2.0 a 7.2.8, 7.0 todas las versiones y 6.4 todas las versiones del portal web FortiOS SSLVPN puede permitir que un atacante autenticado realice una denegación de servicio en el portal web SSLVPN a través de una URL especialmente manipulada .

14 Jan 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-14 14:15

Updated : 2025-07-22 21:26

NVD link : CVE-2024-36504

Mitre link : CVE-2024-36504

CVE.ORG link : CVE-2024-36504

JSON object : View

Products Affected

fortinet

  • fortios
CWE
CWE-125

Out-of-bounds Read