NetSight
medium6.5

CVE-2024-47573

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, …

Impact

An improper validation of integrity check value vulnerability [CWE-354] in FortiNDR version 7.4.2 and below, version 7.2.1 and below, version 7.1.1 and below, version 7.0.6 and below may allow an authenticated attacker with at least Read/Write permission on system maintenance to install a corrupted firmware image.

Affected products

VendorProductAffected versions
FortinetFortindr
from 7.0.0 before 7.2.2
from 7.4.0 before 7.4.3

Weakness classification

References