CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-40591

An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 26.9%

CVSS Severity

CVSS v3 Score 8.8

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-302

Products affected by CVE-2024-40591

Fortinet » Fortios » Version: 6.4.0

cpe:2.3:o:fortinet:fortios:6.4.0
Fortinet » Fortios » Version: 6.4.1

cpe:2.3:o:fortinet:fortios:6.4.1
Fortinet » Fortios » Version: 6.4.10

cpe:2.3:o:fortinet:fortios:6.4.10
Fortinet » Fortios » Version: 6.4.11

cpe:2.3:o:fortinet:fortios:6.4.11
Fortinet » Fortios » Version: 6.4.12

cpe:2.3:o:fortinet:fortios:6.4.12
Fortinet » Fortios » Version: 6.4.13

cpe:2.3:o:fortinet:fortios:6.4.13
Fortinet » Fortios » Version: 6.4.14

cpe:2.3:o:fortinet:fortios:6.4.14
Fortinet » Fortios » Version: 6.4.15

cpe:2.3:o:fortinet:fortios:6.4.15
Fortinet » Fortios » Version: 6.4.2

cpe:2.3:o:fortinet:fortios:6.4.2
Fortinet » Fortios » Version: 6.4.3

cpe:2.3:o:fortinet:fortios:6.4.3
Fortinet » Fortios » Version: 6.4.4

cpe:2.3:o:fortinet:fortios:6.4.4
Fortinet » Fortios » Version: 6.4.5

cpe:2.3:o:fortinet:fortios:6.4.5
Fortinet » Fortios » Version: 6.4.6

cpe:2.3:o:fortinet:fortios:6.4.6
Fortinet » Fortios » Version: 6.4.7

cpe:2.3:o:fortinet:fortios:6.4.7
Fortinet » Fortios » Version: 6.4.8

cpe:2.3:o:fortinet:fortios:6.4.8
Fortinet » Fortios » Version: 6.4.9

cpe:2.3:o:fortinet:fortios:6.4.9
Fortinet » Fortios » Version: 7.0.0

cpe:2.3:o:fortinet:fortios:7.0.0
Fortinet » Fortios » Version: 7.0.1

cpe:2.3:o:fortinet:fortios:7.0.1
Fortinet » Fortios » Version: 7.0.10

cpe:2.3:o:fortinet:fortios:7.0.10
Fortinet » Fortios » Version: 7.0.11

cpe:2.3:o:fortinet:fortios:7.0.11
Fortinet » Fortios » Version: 7.0.12

cpe:2.3:o:fortinet:fortios:7.0.12
Fortinet » Fortios » Version: 7.0.13

cpe:2.3:o:fortinet:fortios:7.0.13
Fortinet » Fortios » Version: 7.0.14

cpe:2.3:o:fortinet:fortios:7.0.14
Fortinet » Fortios » Version: 7.0.15

cpe:2.3:o:fortinet:fortios:7.0.15
Fortinet » Fortios » Version: 7.0.2

cpe:2.3:o:fortinet:fortios:7.0.2
Fortinet » Fortios » Version: 7.0.3

cpe:2.3:o:fortinet:fortios:7.0.3
Fortinet » Fortios » Version: 7.0.4

cpe:2.3:o:fortinet:fortios:7.0.4
Fortinet » Fortios » Version: 7.0.5

cpe:2.3:o:fortinet:fortios:7.0.5
Fortinet » Fortios » Version: 7.0.6

cpe:2.3:o:fortinet:fortios:7.0.6
Fortinet » Fortios » Version: 7.0.7

cpe:2.3:o:fortinet:fortios:7.0.7
Fortinet » Fortios » Version: 7.0.8

cpe:2.3:o:fortinet:fortios:7.0.8
Fortinet » Fortios » Version: 7.0.9

cpe:2.3:o:fortinet:fortios:7.0.9
Fortinet » Fortios » Version: 7.2.0

cpe:2.3:o:fortinet:fortios:7.2.0
Fortinet » Fortios » Version: 7.2.1

cpe:2.3:o:fortinet:fortios:7.2.1
Fortinet » Fortios » Version: 7.2.2

cpe:2.3:o:fortinet:fortios:7.2.2
Fortinet » Fortios » Version: 7.2.3

cpe:2.3:o:fortinet:fortios:7.2.3
Fortinet » Fortios » Version: 7.2.4

cpe:2.3:o:fortinet:fortios:7.2.4
Fortinet » Fortios » Version: 7.2.5

cpe:2.3:o:fortinet:fortios:7.2.5
Fortinet » Fortios » Version: 7.2.6

cpe:2.3:o:fortinet:fortios:7.2.6
Fortinet » Fortios » Version: 7.2.7

cpe:2.3:o:fortinet:fortios:7.2.7
Fortinet » Fortios » Version: 7.2.8

cpe:2.3:o:fortinet:fortios:7.2.8
Fortinet » Fortios » Version: 7.2.9

cpe:2.3:o:fortinet:fortios:7.2.9
Fortinet » Fortios » Version: 7.4.0

cpe:2.3:o:fortinet:fortios:7.4.0
Fortinet » Fortios » Version: 7.4.1

cpe:2.3:o:fortinet:fortios:7.4.1
Fortinet » Fortios » Version: 7.4.2

cpe:2.3:o:fortinet:fortios:7.4.2
Fortinet » Fortios » Version: 7.4.3

cpe:2.3:o:fortinet:fortios:7.4.3
Fortinet » Fortios » Version: 7.4.4

cpe:2.3:o:fortinet:fortios:7.4.4
Fortinet » Fortios » Version: 7.6.0

cpe:2.3:o:fortinet:fortios:7.6.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-40591

Products

Pricing

Contact Us