CVE-2024-23113 PoC — Fortinet FortiOS 格式化字符串错误漏洞

Source

https://github.com/OxLmahdi/cve-2024-23113

Associated Vulnerability

Title: Fortinet FortiOS 格式化字符串错误漏洞 (CVE-2024-23113)
Description:A use of externally-controlled format string in Fortinet FortiOS versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.6, 7.0.0 through 7.0.13, FortiProxy versions 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14, FortiPAM versions 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiSwitchManager versions 7.2.0 through 7.2.3, 7.0.0 through 7.0.3 allows attacker to execute unauthorized code or commands via specially crafted packets.

Readme

# cve-2024-23113
![1](https://github.com/user-attachments/assets/bf9c82d7-0ff2-40dd-9428-e0cf08b9983f)

![2](https://github.com/user-attachments/assets/679daa3c-47f8-4b8c-905d-beeeca4fa6ad)

![3](https://github.com/user-attachments/assets/6339c768-9461-4b57-a193-1bce937798e1)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →