SB2025041046 - Multiple vulnerabilities in Fortinet products 

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2025041046

SB2025041046 - Multiple vulnerabilities in Fortinet products

Published: April 10, 2025

Security Bulletin ID SB2025041046
Severity
High
Patch available
YES
Number of vulnerabilities 2
Exploitation vector Remote access
Highest impact Code execution

Breakdown by Severity

High 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 2 secuirty vulnerabilities.


1) Weak authentication (CVE-ID: CVE-2024-50563)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to weak authentication in csfd daemon. An unauthenticated attacker with access to the security fabric interface and port can bypass the authentication process and access a restricted list of features.


2) Weak authentication (CVE-ID: CVE-2024-48886)

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

The vulnerability exists due to weak authentication in csfd daemon. An unauthenticated attacker with access to the security fabric interface and port can bypass the authentication process and access a restricted list of features.


Remediation

Install update from vendor's website.

References