CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects FortiOS. Exploitation may require the attacker to be authenticated. It may lead to a denial-of-service condition.
CVE
CVE-2024-36504
Severity
MEDIUM
CVSS
6.5
EPSS
0.70%
FortiOS
Original NVD Description
An out-of-bounds read vulnerability [CWE-125] in FortiOS SSLVPN web portal versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, 7.0 all verisons, and 6.4 all versions may allow an authenticated attacker to perform a denial of service on the SSLVPN web portal via a specially crafted URL.
Related CVEs
Other vulnerabilities affecting the same vendor(s)