Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-46662


A improper neutralization of special elements used in a command ('command injection') in Fortinet FortiManager versions 7.4.1 through 7.4.3, FortiManager Cloud versions 7.4.1 through 7.4.3 allows attacker to escalation of privilege via specifically crafted packets


Published

2025-03-14T15:15:43.200

Last Modified

2025-07-24T18:49:00.753

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.8 (HIGH)

Weaknesses
  • Type: Primary
    CWE-77

Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet fortimanager < 7.4.4 Yes
Application fortinet fortimanager_cloud < 7.4.4 Yes

References