CVE-2024-33508

7.3 highEPSS 1.3%

High (7.3) in fortinet forticlient enterprise management server. EPSS 1.3% chance of exploitation in the next 30 days.

An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 may allow an unauthenticated attacker to execute limited and temporary operations on the underlying database via crafted requests.

Severity

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 70% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2024-09-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:forticlient_enterprise_management_server

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-123

Check your stack JSON