Exploitation Summary
CVE-2024-47575 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added October 23, 2024.
EIP tracks 5 public exploits from researchers including watchtowrlabs, SkyGodling, AnnnNix, including a Metasploit module exploits/linux/misc/fortimanager_rce_cve_2024_47575.
A Nuclei detection template is also available.
AI-analyzed exploit summary This is a functional exploit for CVE-2024-47575, an unauthenticated remote code execution vulnerability in Fortinet FortiManager. The exploit leverages a custom protocol to send malicious payloads, resulting in a reverse shell.
Description
A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, FortiManager 7.0.0 through 7.0.12, FortiManager 6.4.0 through 6.4.14, FortiManager 6.2.0 through 6.2.12, Fortinet FortiManager Cloud 7.4.1 through 7.4.4, FortiManager Cloud 7.2.1 through 7.2.7, FortiManager Cloud 7.0.1 through 7.0.12, FortiManager Cloud 6.4.1 through 6.4.7 allows attacker to execute arbitrary code or commands via specially crafted requests.
Exploits (5)
This is a functional exploit for CVE-2024-47575, an unauthenticated remote code execution vulnerability in Fortinet FortiManager. The exploit leverages a custom protocol to send malicious payloads, resulting in a reverse shell.
This is a functional exploit for CVE-2024-47575, targeting Fortinet FortiManager's unauthenticated remote code execution vulnerability. It leverages a custom SSL socket to send crafted requests, achieving RCE via command injection in a JSON payload.
This PoC exploits CVE-2024-47575 by executing a base64-encoded and zlib-compressed Python script. The script is decoded and executed, likely achieving remote code execution (RCE) on the target system.
This is a functional exploit PoC for CVE-2024-47575 targeting FortiManager, leveraging a command injection vulnerability to achieve remote code execution via a reverse shell payload.
This Metasploit module exploits CVE-2024-47575, an unauthenticated RCE vulnerability in Fortinet FortiManager and FortiManager Cloud, by leveraging a missing authentication flaw in the FGFM service to execute commands as root.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H