Multiple Vulnerabilities Affecting Fortinet FortiOS and FortiGate
A critical vulnerability (CVE-2024-47575 / FortiJump) has been identified in the FortiGate to FortiManager protocol (FGFM) daemon, allowing unauthenticated remote attackers to execute arbitrary code or commands via crafted requests.
Description
Technical context and vulnerability details
The FortiGate-to-FortiManager (FGFM) protocol handles secure configuration synchronization, firmware upgrades, and telemetry collection between managed firewalls and central management servers.
These products are affected by the following vulnerabilities:
CVE-2024-47575: Missing authentication for critical function (CWE-306) in the fgfmd daemon. A remote attacker can connect to the management port and send crafted commands to exfiltrate configuration data. Classified Critical with a CVSS v3.1 score of 9.8.
Potential Risks & Impact
Potential consequences upon exploitation
- Remote code execution on management systems managing enterprise security fabrics;
- Unauthorized extraction of managed device configurations, IPsec keys, and user credentials;
- Complete compromise of network security orchestration.
Affected systems
Products, components and targeted versions
- FortiManager 7.6: version 7.6.0;
- FortiManager 7.4: versions 7.4.0 to 7.4.4;
- FortiManager 7.2: versions 7.2.0 to 7.2.7;
- FortiManager 7.0: versions 7.0.0 to 7.0.12;
- FortiManager 6.4: versions 6.4.0 to 6.4.14;
- FortiManager 6.2: versions 6.2.0 to 6.2.12.
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Immediately upgrade FortiManager to patched versions 7.6.1, 7.4.5, 7.2.8, or 7.0.13 or higher;
- Block unauthenticated FGFM protocol traffic (TCP port 541) from untrusted networks;
- Enable strict certificate verification for all connected FortiGate appliances.
Sources & External Links
Vendor security advisories and documentation
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.