Description
An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands.
Metrics
CVSS 3.1 6.7/10
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | FortiOS | 7.6.0; >= 7.4.0, <= 7.4.5; >= 7.2.5, <= 7.2.10; >= 7.0.0, <= 7.0.15; >= 6.4.0, <= 6.4.16 |
References
- https://fortiguard.fortinet.com/psirt/FG-IR-24-361Vendor Advisory
Timeline
- Published
- Oct 14, 2025
- Last modified
- Oct 8, 2026
- NVD status
- Analyzed