CVE-2024-40588
Multiple relative path traversal vulnerabilities [CWE-23] in Fortinet FortiMail version 7.6.0 through 7.6.1 and before 7.4.3, FortiVoice version 7.0.0 through 7.0.5 and before 7.4.9, FortiRecorder version 7.2.0 through 7.2.1 and before 7.0.4, FortiCamera & FortiNDR version 7.6.0 and before 7.4.6 may allow a privileged attacker to read files from the underlying filesystem via crafted CLI requests.
| Software | From | Fixed in |
|---|---|---|
| fortinet / forticamera_firmware | 2.0.0 | 2.1.4.x |
| fortinet / fortimail | 7.6.0 | 7.6.2 |
| fortinet / fortimail | 6.4.0 | 7.4.4 |
| fortinet / fortindr | 7.0.0 | 7.4.7 |
| fortinet / fortindr | 7.6.0 | 7.6.2 |
| fortinet / fortirecorder | 7.2.0 | 7.2.2 |
| fortinet / fortirecorder | 6.4.0 | 7.0.5 |
| fortinet / fortivoice | 7.0.0 | 7.0.5 |
| fortinet / fortivoice | 6.0.0 | 6.4.10 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime