UpHeron
All vulnerabilities

Servers and applications

CVE-2024-35279

A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface.

Severity
High 8.1
Published
11 Feb 2025
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
7.2.9, 7.4.5
Sources
NVD

Affected software

SoftwareAffected versions
Fortinet FortiOSServers and applications · cpe:o:fortinet:fortios
  • From 7.2.4 before 7.2.9
  • From 7.4.0 before 7.4.5

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2024-35279
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2024-35279