CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects Fortinet.
CVE
CVE-2024-21757
Severity
MEDIUM
CVSS
6.1
EPSS
0.19%
Fortinet
Original NVD Description
A unverified password change in Fortinet FortiManager versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, as well as Fortinet FortiAnalyzer versions 7.0.0 through 7.0.10, versions 7.2.0 through 7.2.4, and versions 7.4.0 through 7.4.1, allows an attacker to modify admin passwords via the device configuration backup.
Related CVEs
Other vulnerabilities affecting the same vendor(s)