CNNVD-202507-1006 Information
CNNVD ID
CNNVD-202507-1006
Related CVE
- CNNVD Published: 2025-07-08
Description (Chinese)
Fortinet FortiOS和Fortinet FortiProxy都是美国飞塔（Fortinet）公司的产品。Fortinet FortiOS是一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSLVPN、Web内容过滤和反垃圾邮件等多种安全功能。Fortinet FortiProxy是一种安全的网络代理，通过结合多种检测技术，如Web过滤、DNS过滤、DLP、反病毒、入侵防御和高级威胁保护，可以保护员工免受网络攻击。FortiProxy有助于减少带宽需求，并通过内容和视频缓存优化网络。 Fortinet FortiOS和Fortinet FortiProxy存在安全漏洞，该漏洞源于缺少关键身份验证步骤，可能导致无效证书用户登录。以下产品及版本受到影响：Fortinet FortiOS 7.6.0至7.6.1版本、7.4.0至7.4.5版本、7.2.0至7.2.10版本和7.0.16之前版本以及FortiProxy 7.6.0至7.6.1版本、7.4.0至7.4.8版本、7.2.0至7.2.13版本和7.0.20之前版本。
Description (English)
Fortinet FortiOS and Fortinet FortiProxy are products of Fortinet. Fortinet FortiOS is a secure operating system dedicated to the FortiGate network security platform. The system provides a wide range of security features for users, including firewalls, anti-virus, IPSEc/SSLVPN, Web content filters and anti-spam. Fortinet FortiProxy is a secure network agent who can protect employees from cyberattacks by combining multiple detection techniques such as Web filtering, DNS filtering, DLP, anti-virus, invasion defense and advanced threat protection. FortiProxy helps reduce bandwidth demand and optimizes the network through content and video caches. There is a security loophole between Fortinet FortiOS and Fortinet FortiProxy, which stems from the lack of key identification steps that may lead to the login of invalid certificates. The following products and versions were affected: Fortinet FortiOS 7.6.0 to 7.6.1, 7.4.0 to 7.4.5, 7.2.0 to 7.2.10 and before 7.0.16, and FortiProxy 7.6.0 to 7.6.1, 7.4.0 to 7.4.8, 7.2.01 and before 7.0.20.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
Fortra
Published
2025-07-08
Last Modified
2026-02-24
References
https://access.redhat.com/security/cve/cve-2024-52965 https://nvd.nist.gov/vuln/detail/CVE-2024-52965
Patch
https://fortiguard.fortinet.com/psirt/FG-IR-24-511
Share on: