目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

目标: 1000 元 · 已筹: 1000 元

100.0%
请我们喝杯咖啡
获取后续新漏洞提醒登录后订阅
一、 漏洞 CVE-2024-21762 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗

尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。

Vulnerability Title
N/A
来源: 美国国家漏洞数据库 NVD
Vulnerability Description
A out-of-bounds write in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, 6.4.0 through 6.4.14, 6.2.0 through 6.2.15, 6.0.0 through 6.0.17, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, 2.0.0 through 2.0.13, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0.0 through 1.0.7 allows attacker to execute unauthorized code or commands via specifically crafted requests
来源: 美国国家漏洞数据库 NVD
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
来源: 美国国家漏洞数据库 NVD
Vulnerability Type
跨界内存写
来源: 美国国家漏洞数据库 NVD
Vulnerability Title
Fortinet FortiOS 缓冲区错误漏洞
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Description
Fortinet FortiOS是美国飞塔（Fortinet）公司的一套专用于FortiGate网络安全平台上的安全操作系统。该系统为用户提供防火墙、防病毒、IPSec/SSLVPN、Web内容过滤和反垃圾邮件等多种安全功能。 Fortinet FortiOS存在缓冲区错误漏洞，该漏洞源于存在越界写入，允许攻击者通过特制请求执行未经授权的代码或命令。
来源: 中国国家信息安全漏洞库 CNNVD
CVSS Information
N/A
来源: 中国国家信息安全漏洞库 CNNVD
Vulnerability Type
N/A
来源: 中国国家信息安全漏洞库 CNNVD
受影响产品
厂商产品影响版本CPE订阅
FortinetFortiProxy 7.4.0 ~ 7.4.2 -
FortinetFortiOS 7.4.0 ~ 7.4.2 -
二、漏洞 CVE-2024-21762 的公开POC
#POC 描述源链接神龙链接
1Nonehttps://github.com/Gh71m/CVE-2024-21762-POCPOC详情
2FortiOS 6.0 - 7.4.2 Out of bound exploit --> RCE!!!https://github.com/c0d3b3af/CVE-2024-21762-POCPOC详情
3Safely detect whether a FortiGate SSL VPN is vulnerable to CVE-2024-21762https://github.com/BishopFox/cve-2024-21762-checkPOC详情
4CVE-2024-21762 POC Forti VPN SSL Out of Boundary RCEhttps://github.com/tr1pl3ight/CVE-2024-21762-POCPOC详情
5FortiOS 6.0 - 7.4.2 Out of bound exploit --> RCE!!!https://github.com/redCode001/CVE-2024-21762-POCPOC详情
6proof-of-concept out-of-bound write vuln in FortiOS ---> RCEhttps://github.com/c0d3b3af/CVE-2024-21762-ExploitPOC详情
7Real proof-of-concept out-of-bound write vuln in FortiOS ---> RCE https://github.com/RequestXss/CVE-2024-21762-Exploit-POCPOC详情
8CVE-2024-21762 is an out of bounds write vulnerability in fortinet fortios which leads to unauthenticated remote code executionhttps://github.com/t4ril/CVE-2024-21762-PoCPOC详情
9RCE exploit for FortiOS 6.0-7.4.2https://github.com/c0d3b3af/CVE-2024-21762-RCE-exploitPOC详情
10This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses.https://github.com/cleverg0d/CVE-2024-21762-CheckerPOC详情
11The only one working RCE exploit that sells for $5,000 on the darknethttps://github.com/JohnHormond/CVE-2024-21762-Fortinet-RCE-WORKPOC详情
12out-of-bounds write in Fortinet FortiOS CVE-2024-21762 vulnerability https://github.com/h4x0r-dz/CVE-2024-21762POC详情
13Chequea si tu firewall es vulnerable a CVE-2024-21762 (RCE sin autenticación)https://github.com/r4p3c4/CVE-2024-21762-Exploit-PoC-Fortinet-SSL-VPN-CheckPOC详情
14Fortinet CVE 2024https://github.com/vorotilovaawex/CVE-2024-21762_POCPOC详情
15Nonehttps://github.com/TheRedDevil1/CVE-2024-21762POC详情
16The PoC demonstrates the potential for remote code execution by exploiting the identified security flaw.https://github.com/d0rb/CVE-2024-21762POC详情
17CVE-2024-21762-POC replayse publishedhttps://github.com/S0SkiPlosK1/CVE-2024-21762-POCPOC详情
18Nonehttps://github.com/lore-is-already-taken/multicheck_CVE-2024-21762POC详情
19Nonehttps://github.com/lolminerxmrig/multicheck_CVE-2024-21762POC详情
20Nonehttps://github.com/AlexLondan/CVE-2024-21762-Fortinet-RCE-ALLWORKPOC详情
21Nonehttps://github.com/zzcentury/FortiGate-CVE-2024-21762POC详情
22Full exploit of Cve-2024-21762!https://github.com/Codeb3af/Cve-2024-21762-POC详情
23Nonehttps://github.com/rdoix/cve-2024-21762-checkerPOC详情
24CVE-2024-21762 是 Fortinet 公司的 FortiOS 和 FortiProxy 产品中的一个严重漏洞，存在于其 SSL VPN 组件中。https://github.com/XiaomingX/cve-2024-21762-pocPOC详情
25Proof-of-concept scanner targeting CVE-2024-21762 in FortiOS SSL VPN’s /remote/hostcheck_validate endpoint with reverse shell payload delivery.https://github.com/abrewer251/CVE-2024-21762_FortiNet_PoCPOC详情
26This script performs vulnerability scanning for CVE-2024-21762, a Fortinet SSL VPN remote code execution vulnerability. It checks whether a given server is vulnerable to this CVE by sending specific requests and analyzing the responses.https://github.com/deFr0ggy/CVE-2024-21762-CheckerPOC详情
27Nonehttps://github.com/0x13-ByteZer0/CVE-2024-21762POC详情
28CVE-2024-21762 是 Fortinet 公司的 FortiOS 和 FortiProxy 产品中的一个严重漏洞，存在于其 SSL VPN 组件中。https://github.com/CrackerCat/cve-2024-21762-pocPOC详情
AI 生成 POC高级

未找到公开 POC。

登录以生成 AI POC
三、漏洞 CVE-2024-21762 的情报信息
Please 登录 to view more intelligence information
IV. Related Vulnerabilities
Same product: FortiProxy
Same vendor: Fortinet
Same weakness: CWE-787
V. Comments for CVE-2024-21762

暂无评论

发表评论