vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2024-52963

MEDIUM
5.9
CVSS Score
Published: January 14, 2025 at 02:08 PM UTC
Updated: October 15, 2026 at 12:58 AM UTC
4 products affected across 2 vendorsFortiOSFortiPAMFortiProxy

Using FortiProxy by Fortinet?

Get instant alerts when new vulnerabilities affect FortiProxy - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
MEDIUM5.9
Exploit prediction
EPSS 0.8%
SSVC
No known exploit

Description

A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

FortiOS· Fortinet
95%
6.4.0 ≤ v ≤ 6.4.156.4.0 ≤ v < 7.2.117.0.0 ≤ v ≤ 7.0.167.2.0 ≤ v ≤ 7.2.107.4.0 ≤ v ≤ 7.4.67.4.0 ≤ v < 7.4.86.4.06.4.16.4.106.4.116.4.126.4.136.4.146.4.156.4.26.4.36.4.46.4.56.4.66.4.76.4.86.4.97.0.07.0.17.0.107.0.117.0.127.0.137.0.147.0.157.0.167.0.27.0.37.0.47.0.57.0.67.0.77.0.87.0.97.2.07.2.17.2.107.2.27.2.37.2.47.2.57.2.67.2.77.2.87.2.97.4.07.4.17.4.27.4.37.4.47.4.57.4.67.6.0
Affected range stops below 7.2.11, so it looks safe — our inference, not a vendor statement
Affected range stops below 7.4.8, so it looks safe — our inference, not a vendor statement
FortiPAM· Fortinet
95%
1.0.0 ≤ v ≤ 1.0.31.1.0 ≤ v ≤ 1.1.21.3.0 ≤ v ≤ 1.3.11.4.0 ≤ v ≤ 1.4.21.0.01.0.11.0.21.0.31.1.01.1.11.1.21.2.01.3.01.3.11.4.01.4.11.4.2
FortiProxy· Fortinet
60%
2.0.0 ≤ v ≤ 2.0.147.0.0 ≤ v ≤ 7.0.207.2.0 ≤ v ≤ 7.2.137.4.0 ≤ v ≤ 7.4.52.0.07.0.07.2.07.4.0
RUGGEDCOM APE1808 Firmware· Siemens
60%
All versions

Remediation

No guide yet

No remediation guidance has been written for this CVE yet. What the record does show:

Patch and advisory references

References (2)

Vendor Advisory
Source: [email protected]
https://fortiguard.fortinet.com/psirt/FG-IR-24-373
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
https://cert-portal.siemens.com/productcert/html/ssa-864900.html

SSVC — Action Prioritization

SSVCNo known exploitNot automatablePartial impact

SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.

CVSS

5.9MEDIUM[email protected]
Attack Vector
NETWORK
Complexity
HIGH
Privileges
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
NONE
Availability
HIGH
Vector?

Quick Info

StatusMODIFIED
CWE
CWE-787

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card