CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52961

An improper neutralization of special elements used in an OS Command vulnerability [CWE-78] vulnerability in Fortinet FortiSandbox 5.0.0, FortiSandbox 4.4.0 through 4.4.6, FortiSandbox 4.2.1 through 4.2.7, FortiSandbox 4.0.0 through 4.0.5, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions allows an authenticated attacker with at least read-only permission to execute unauthorized commands via crafted requests.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 36.5%

CVSS Severity

CVSS v3 Score 8.8

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-306

Products affected by CVE-2024-52961

Fortinet » Fortisandbox » Version: 3.0.0

cpe:2.3:a:fortinet:fortisandbox:3.0.0
Fortinet » Fortisandbox » Version: 3.0.1

cpe:2.3:a:fortinet:fortisandbox:3.0.1
Fortinet » Fortisandbox » Version: 3.0.2

cpe:2.3:a:fortinet:fortisandbox:3.0.2
Fortinet » Fortisandbox » Version: 3.0.3

cpe:2.3:a:fortinet:fortisandbox:3.0.3
Fortinet » Fortisandbox » Version: 3.0.4

cpe:2.3:a:fortinet:fortisandbox:3.0.4
Fortinet » Fortisandbox » Version: 3.0.5

cpe:2.3:a:fortinet:fortisandbox:3.0.5
Fortinet » Fortisandbox » Version: 3.0.6

cpe:2.3:a:fortinet:fortisandbox:3.0.6
Fortinet » Fortisandbox » Version: 3.0.7

cpe:2.3:a:fortinet:fortisandbox:3.0.7
Fortinet » Fortisandbox » Version: 3.1.0

cpe:2.3:a:fortinet:fortisandbox:3.1.0
Fortinet » Fortisandbox » Version: 3.1.1

cpe:2.3:a:fortinet:fortisandbox:3.1.1
Fortinet » Fortisandbox » Version: 3.1.2

cpe:2.3:a:fortinet:fortisandbox:3.1.2
Fortinet » Fortisandbox » Version: 3.1.3

cpe:2.3:a:fortinet:fortisandbox:3.1.3
Fortinet » Fortisandbox » Version: 3.1.4

cpe:2.3:a:fortinet:fortisandbox:3.1.4
Fortinet » Fortisandbox » Version: 3.1.5

cpe:2.3:a:fortinet:fortisandbox:3.1.5
Fortinet » Fortisandbox » Version: 3.2.0

cpe:2.3:a:fortinet:fortisandbox:3.2.0
Fortinet » Fortisandbox » Version: 3.2.1

cpe:2.3:a:fortinet:fortisandbox:3.2.1
Fortinet » Fortisandbox » Version: 3.2.2

cpe:2.3:a:fortinet:fortisandbox:3.2.2
Fortinet » Fortisandbox » Version: 3.2.3

cpe:2.3:a:fortinet:fortisandbox:3.2.3
Fortinet » Fortisandbox » Version: 3.2.4

cpe:2.3:a:fortinet:fortisandbox:3.2.4
Fortinet » Fortisandbox » Version: 4.0.0

cpe:2.3:a:fortinet:fortisandbox:4.0.0
Fortinet » Fortisandbox » Version: 4.0.1

cpe:2.3:a:fortinet:fortisandbox:4.0.1
Fortinet » Fortisandbox » Version: 4.0.2

cpe:2.3:a:fortinet:fortisandbox:4.0.2
Fortinet » Fortisandbox » Version: 4.0.3

cpe:2.3:a:fortinet:fortisandbox:4.0.3
Fortinet » Fortisandbox » Version: 4.0.4

cpe:2.3:a:fortinet:fortisandbox:4.0.4
Fortinet » Fortisandbox » Version: 4.0.5

cpe:2.3:a:fortinet:fortisandbox:4.0.5
Fortinet » Fortisandbox » Version: 4.2.0

cpe:2.3:a:fortinet:fortisandbox:4.2.0
Fortinet » Fortisandbox » Version: 4.2.1

cpe:2.3:a:fortinet:fortisandbox:4.2.1
Fortinet » Fortisandbox » Version: 4.2.2

cpe:2.3:a:fortinet:fortisandbox:4.2.2
Fortinet » Fortisandbox » Version: 4.2.3

cpe:2.3:a:fortinet:fortisandbox:4.2.3
Fortinet » Fortisandbox » Version: 4.2.4

cpe:2.3:a:fortinet:fortisandbox:4.2.4
Fortinet » Fortisandbox » Version: 4.2.5

cpe:2.3:a:fortinet:fortisandbox:4.2.5
Fortinet » Fortisandbox » Version: 4.2.6

cpe:2.3:a:fortinet:fortisandbox:4.2.6
Fortinet » Fortisandbox » Version: 4.2.7

cpe:2.3:a:fortinet:fortisandbox:4.2.7
Fortinet » Fortisandbox » Version: 4.4.0

cpe:2.3:a:fortinet:fortisandbox:4.4.0
Fortinet » Fortisandbox » Version: 4.4.1

cpe:2.3:a:fortinet:fortisandbox:4.4.1
Fortinet » Fortisandbox » Version: 4.4.2

cpe:2.3:a:fortinet:fortisandbox:4.4.2
Fortinet » Fortisandbox » Version: 4.4.3

cpe:2.3:a:fortinet:fortisandbox:4.4.3
Fortinet » Fortisandbox » Version: 4.4.4

cpe:2.3:a:fortinet:fortisandbox:4.4.4
Fortinet » Fortisandbox » Version: 4.4.5

cpe:2.3:a:fortinet:fortisandbox:4.4.5
Fortinet » Fortisandbox » Version: 4.4.6

cpe:2.3:a:fortinet:fortisandbox:4.4.6
Fortinet » Fortisandbox » Version: 5.0.0

cpe:2.3:a:fortinet:fortisandbox:5.0.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-52961

Products

Pricing

Contact Us