ID:10908 - Exploit for Missing authentication for critical function in FortiManager - CVE-2024-47575

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to missing authentication in FortiManager fgfmd daemon. A remote non-authenticated attacker can send specially crafted requests to the system and execute arbitrary commands, resulting in full system compromise.

Note, the vulnerability is being actively exploited in the wild.

Remediation