CNNVD-202510-1979 Information
CNNVD ID
CNNVD-202510-1979
Related CVE
- CNNVD Published: 2025-10-14
Description (Chinese)
Fortinet FortiOS等都是美国飞塔（Fortinet）公司的产品。Fortinet FortiOS是一套专用于FortiGate网络安全平台上的安全操作系统。Fortinet FortiAnalyzer是一套集中式网络安全报告解决方案。Fortinet FortiProxy是一种安全的网络代理，通过结合多种检测技术，如Web过滤、DNS过滤、DLP、反病毒、入侵防御和高级威胁保护，可以保护员工免受网络攻击。FortiProxy有助于减少带宽需求，并通过内容和视频缓存优化网络。 Fortinet多款产品存在安全漏洞，该漏洞源于堆缓冲区溢出，可能导致执行任意代码。以下产品及版本受到影响：FortiOS 7.6.1及之前版本、7.4.5及之前版本、7.2.10及之前版本、7.0.16及之前版本、6.4.15及之前版本、6.2.17及之前版本、FortiManager Cloud 7.6.2版本、7.4.5及之前版本、7.2.8及之前版本、7outhern0.13及之前版本、6.4.7及之前版本、FortiAnalyzer Cloud 7.4.5及之前版本、7.2.8及之前版本、7.0.13及之前版本、6.4.7及之前版本、FortiProxy 7.6.0版本、7.4.6及之前版本、7.2.12及之前版本、7.0.19及之前版本、2.0.14及之前版本、1.2.13及之前版本、1.1.6及之前版本、1.0.7及之前版本、FortiAnalyzer 7.6.2及之前版本、7.4.5及之前版本、7.2.8及之前版本、7.0.13及之前版本、6.4.15及之前版本、6.2.13及之前版本、6.0.12及之前版本、FortiManager 7.6.1及之前版本、7.4.5及之前版本、7.2.9及之前版本、7.0.13及之前版本、6.4.15及之前版本、6.2.13及之前版本、6.0.12及之前版本。
Description (English)
Fortinet FortiOS and others are products of Fortinet. Fortinet FortiOS is a secure operating system dedicated to the FortiGate network security platform. Fortinet FortiAnalyzer is a centralized cybersecurity reporting solution. Fortinet FortiProxy is a secure network agent who can protect employees from cyberattacks by combining multiple detection techniques such as Web filtering, DNS filtering, DLP, anti-virus, invasion defense and advanced threat protection. FortiProxy helps reduce bandwidth demand and optimizes the network through content and video caches. There is a safety gap in Fortinet ’ s multiple products, which stems from the spilling of the buffer zone, which could lead to the implementation of any code. The following products and versions have been affected: FortiOS 7.6.1 and earlier, 7.4.5 and earlier, 7.2.10 and earlier, 7.4.16 and earlier, 6.4.15 and earlier, 6.2.17 and earlier, 7.2.12 and earlier, 7.4.5 and earlier, 7.2.8 and earlier, 7.0.13 and earlier, 6.4.7 and earlier, FortiAlyzer Cloud 7.4 and earlier, 7.2.8 and earlier, 7.0.13 and earlier, 7.0.13 and earlier, 6.4.13 and prior, 6.4.7 and prior, 6.4.7 and earlier, 7.4.7 and prior, 7.4.0 and earlier, 7.4.0 and earlier, 7.4 and before, 6.2.12 and before, 6.2.12 and before, 6.2 and before, 6.2.1.3 and previous, 1.1.6 and previous, 1.0.7 and earlier and 0.9 and before and before, 0.2.7.5 and before, and before and before, and before and before, and before, 0.2 and 7.9, and before and before, and before, and before, and before, and before, and before, 0.2 and before, and before, and before, and before, and with.
Hazard Level
Medium
Vulnerability Type
其他
Affected Vendor
飞塔
Published
2025-10-14
Last Modified
2026-02-24
References
https://fortiguard.fortinet.com/psirt/FG-IR-24-442 https://access.redhat.com/security/cve/cve-2024-50571
Patch
https://fortiguard.fortinet.com/psirt/FG-IR-24-442
Share on: