Format String Bug in fgfmd Fortinet PSIRT Advisories Fortinet PSIRT Contact: Website: https://fortiguard.fortinet.com/faq/psirt-contact FG-IR-24-029 Final 1 1 2024-02-08T00:00:00 Current version 2024-02-08T00:00:00 2024-10-17T00:00:00 A use of externally-controlled format string vulnerability [CWE-134] in FortiOS fgfmd daemon may allow a remote unauthenticated attacker to execute arbitrary code or commands via specially crafted requests.A third-party report is indicating this may be exploited in the wild. None Execute unauthorized code or commands Internally discovered and reported by Gwendal Guégniaud of Fortinet Product Security team. FortiOS 7.4.2 FortiOS 7.4.1 FortiOS 7.4.0 FortiOS 7.2.6 FortiOS 7.2.5 FortiOS 7.2.4 FortiOS 7.2.3 FortiOS 7.2.2 FortiOS 7.2.1 FortiOS 7.2.0 FortiOS 7.0.13 FortiOS 7.0.12 FortiOS 7.0.11 FortiOS 7.0.10 FortiOS 7.0.9 FortiOS 7.0.8 FortiOS 7.0.7 FortiOS 7.0.6 FortiOS 7.0.5 FortiOS 7.0.4 FortiOS 7.0.3 FortiOS 7.0.2 FortiOS 7.0.1 FortiOS 7.0.0 FortiPAM 1.2.0 FortiPAM 1.1.2 FortiPAM 1.1.1 FortiPAM 1.1.0 FortiPAM 1.0.3 FortiPAM 1.0.2 FortiPAM 1.0.1 FortiPAM 1.0.0 FortiProxy 7.4.2 FortiProxy 7.4.1 FortiProxy 7.4.0 FortiProxy 7.2.8 FortiProxy 7.2.7 FortiProxy 7.2.6 FortiProxy 7.2.5 FortiProxy 7.2.4 FortiProxy 7.2.3 FortiProxy 7.2.2 FortiProxy 7.2.1 FortiProxy 7.2.0 FortiProxy 7.0.15 FortiProxy 7.0.14 FortiProxy 7.0.13 FortiProxy 7.0.12 FortiProxy 7.0.11 FortiProxy 7.0.10 FortiProxy 7.0.9 FortiProxy 7.0.8 FortiProxy 7.0.7 FortiProxy 7.0.6 FortiProxy 7.0.5 FortiProxy 7.0.4 FortiProxy 7.0.3 FortiProxy 7.0.2 FortiProxy 7.0.1 FortiProxy 7.0.0 FortiSwitchManager 7.2.3 FortiSwitchManager 7.2.2 FortiSwitchManager 7.2.1 FortiSwitchManager 7.2.0 FortiSwitchManager 7.0.3 FortiSwitchManager 7.0.2 FortiSwitchManager 7.0.1 FortiSwitchManager 7.0.0 CVE-2024-23113 FortiOS-7.4.2 FortiOS-7.4.1 FortiOS-7.4.0 FortiOS-7.2.6 FortiOS-7.2.5 FortiOS-7.2.4 FortiOS-7.2.3 FortiOS-7.2.2 FortiOS-7.2.1 FortiOS-7.2.0 FortiOS-7.0.13 FortiOS-7.0.12 FortiOS-7.0.11 FortiOS-7.0.10 FortiOS-7.0.9 FortiOS-7.0.8 FortiOS-7.0.7 FortiOS-7.0.6 FortiOS-7.0.5 FortiOS-7.0.4 FortiOS-7.0.3 FortiOS-7.0.2 FortiOS-7.0.1 FortiOS-7.0.0 FortiPAM-1.2.0 FortiPAM-1.1.2 FortiPAM-1.1.1 FortiPAM-1.1.0 FortiPAM-1.0.3 FortiPAM-1.0.2 FortiPAM-1.0.1 FortiPAM-1.0.0 FortiProxy-7.4.2 FortiProxy-7.4.1 FortiProxy-7.4.0 FortiProxy-7.2.8 FortiProxy-7.2.7 FortiProxy-7.2.6 FortiProxy-7.2.5 FortiProxy-7.2.4 FortiProxy-7.2.3 FortiProxy-7.2.2 FortiProxy-7.2.1 FortiProxy-7.2.0 FortiProxy-7.0.15 FortiProxy-7.0.14 FortiProxy-7.0.13 FortiProxy-7.0.12 FortiProxy-7.0.11 FortiProxy-7.0.10 FortiProxy-7.0.9 FortiProxy-7.0.8 FortiProxy-7.0.7 FortiProxy-7.0.6 FortiProxy-7.0.5 FortiProxy-7.0.4 FortiProxy-7.0.3 FortiProxy-7.0.2 FortiProxy-7.0.1 FortiProxy-7.0.0 FortiSwitchManager-7.2.3 FortiSwitchManager-7.2.2 FortiSwitchManager-7.2.1 FortiSwitchManager-7.2.0 FortiSwitchManager-7.0.3 FortiSwitchManager-7.0.2 FortiSwitchManager-7.0.1 FortiSwitchManager-7.0.0 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:U/RC:C https://fortiguard.fortinet.com/psirt/FG-IR-24-029 Format String Bug in fgfmd Reference>