PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

CVE-2024-23108: Fortinet FortiSIEM 2nd Order Command Injection Deep-Dive

horizon3.ai | vulnerability | CVE-2024-23108 | #vulnerability-research | #command-injection | #fortinet
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

CVE-2024-23108 Fortinet FortiSIEM Command Injection Deep-Dive and Indicators of Compromise. This blog details a command injection vulnerability which allows an unauthenticated attacker to access the FortiSIEM server as root to execute arbitrary commands.
CVE
CVE-2024-23108
Published
Collected

Related coverage

vulnerability · horizon3.ai
CVE-2023-34992: Fortinet FortiSIEM Command Injection Deep-Dive
CVE-2023-34992 Fortinet FortiSIEM Command Injection Deep-Dive and Indicators of Compromise. This blog details a command injection vulnerability which allows an unauthenticated attacker to access the FortiSIEM server as root to execute arbitrary commands.
vulnerability · horizon3.ai
CVE-2026-106173 Deep-Dive: FortiSIEM gRPC Path Traversal File Write RCE
Horizon3 analyzes CVE-2026-106173, a critical FortiSIEM gRPC vulnerability enabling unauthenticated path traversal, arbitrary file writes, and code execution.
vulnerability · horizon3.ai
CVE-2025-64155: Three Years of Remotely Rooting the Fortinet FortiSIEM
Horizon3 details CVE-2025-64155, revealing chained FortiSIEM vulnerabilities enabling remote code execution and root access, analysis of the root cause, and indicators of compromise.
vulnerability · horizon3.ai
CVE-2025-32756: Low-Rise Jeans are Back and so are Buffer Overflows
Analyze CVE-2025-32756, a Fortinet buffer overflow flaw under active attack, and see how NodeZero can validate exposure now.
vulnerability · horizon3.ai
CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability
CVE-2024-8190: Investigating CISA KEV Ivanti Cloud Service Appliance Command Injection Vulnerability and Indicators of Compromise
vulnerability · horizon3.ai
CVE-2023-48788: Revisiting Fortinet FortiClient EMS to Exploit 7.2.X
Revisiting CVE-2023-48788, a SQL injection in Fortinet FortiClient EMS Server. This blog details bypassing several restrictions to achieve arbitrary command execution as SYSTEM.
Back