Vulnerability details
CVE-2024-40591
Fortinet FortiOS
CVSS 3.1
8.0High
Official description
An incorrect privilege assignment vulnerability [CWE-266] in Fortinet FortiOS version 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9 and before 7.0.15 allows an authenticated admin whose access profile has the Security Fabric permission to escalate their privileges to super-admin by connecting the targetted FortiGate to a malicious upstream FortiGate they control.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.0High | 3.1 | CVEProject cvelistV5 (CNA) (fortinet) | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:R |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Fortinet | FortiOS | 7.6.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 6.4.0 ≤ v ≤ 6.4.15 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.0.0 ≤ v ≤ 7.0.15 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.2.0 ≤ v ≤ 7.2.9 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiOS | 7.4.0 ≤ v ≤ 7.4.4 | CVEProject cvelistV5 (CNA) |
References and advisories
1
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2025-02-11
- Last updated
- 2026-02-26
- State
- Published
- Assigner (CNA)
- fortinet
Exploit prediction (EPSS)
0.62%
Probability of exploitation in 30 days
49.9%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-266Escalation of privilege