Security Advisory

CVE-2024-54025

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-04-08 14:02:45
Last updated 2026-02-26 18:28:41
Assigner fortinet
CVSS score 6.5
State PUBLISHED

Description

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiIsolator CLI before version 2.4.6 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.