Vulnerability · Published Jul 9, 2024 · Assigned by fortinet
CVE-2024-26015
Low 3.1
In plain English
A low-severity security flaw in FortiOS from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Official description
An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiProxy | 7.4.0 – through 7.4.37.2.0 – through 7.2.107.0.0 – through 7.0.18 |
| Fortinet | FortiOS | 7.4.0 – through 7.4.37.2.0 – through 7.2.87.0.0 – through 7.0.15 |
Weakness: CWE-1389 · Vector: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:N/E:F/RL:W/RC:R