CVE-2024-50571

CVE.org · Published

Record status: Published
Identifier year (not publication year): 2024
Source publication: Oct 14, 2025
Source updated: Oct 22, 2026
Imported by cveboard: Oct 24, 2026
Source snapshot: cve_2026-10-24_midnight_baseline · Oct 24, 2026

CNA source text (English)

A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyzer 6.2 all versions, FortiAnalyzer 6.0 all versions, FortiAnalyzer Cloud 7.4.1 through 7.4.5, FortiAnalyzer Cloud 7.2.1 through 7.2.9, FortiAnalyzer Cloud 7.0.1 through 7.0.13, FortiAnalyzer Cloud 6.4 all versions, FortiManager 7.6.0 through 7.6.1, FortiManager 7.4.0 through 7.4.5, FortiManager 7.2.0 through 7.2.9, FortiManager 7.0.0 through 7.0.13, FortiManager 6.4 all versions, FortiManager 6.2 all versions, FortiManager 6.0 all versions, FortiManager Cloud 7.6.2, FortiManager Cloud 7.4.1 through 7.4.5, FortiManager Cloud 7.2.1 through 7.2.9, FortiManager Cloud 7.0.1 through 7.0.13, FortiManager Cloud 6.4 all versions, FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.6, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4.0 through 6.4.15, FortiOS 6.2 all versions, FortiProxy 7.6.0 through 7.6.1, FortiProxy 7.4.0 through 7.4.7, FortiProxy 7.2.0 through 7.2.12, FortiProxy 7.0.0 through 7.0.19, FortiProxy 2.0 all versions, FortiProxy 01.02 all versions, FortiProxy 1.2 all versions, FortiProxy 01.01 all versions, FortiProxy 1.1 all versions, FortiProxy 01.00 all versions allows attacker to execute unauthorized code or commands via specifically crafted requests.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

FortiManager

Vendor: Fortinet
Product: FortiManager
Platforms: Unknown
Default status: unaffected

FortiManager · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.6.0	`affected`	semver	Unavailable	7.6.1	None listed
7.4.0	`affected`	semver	Unavailable	7.4.5	None listed
7.2.0	`affected`	semver	Unavailable	7.2.9	None listed
7.0.0	`affected`	semver	Unavailable	7.0.13	None listed
6.4.0	`affected`	semver	Unavailable	6.4.15	None listed
6.2.0	`affected`	semver	Unavailable	6.2.13	None listed
6.0.0	`affected`	semver	Unavailable	6.0.12	None listed

FortiOS

Vendor: Fortinet
Product: FortiOS
Platforms: Unknown
Default status: unaffected

FortiOS · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.6.0	`affected`	semver	Unavailable	7.6.2	None listed
7.4.0	`affected`	semver	Unavailable	7.4.6	None listed
7.2.0	`affected`	semver	Unavailable	7.2.10	None listed
7.0.0	`affected`	semver	Unavailable	7.0.16	None listed
6.4.0	`affected`	semver	Unavailable	6.4.15	None listed
6.2.0	`affected`	semver	Unavailable	6.2.17	None listed

FortiProxy

Vendor: Fortinet
Product: FortiProxy
Platforms: Unknown
Default status: unaffected

FortiProxy · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.6.0	`affected`	semver	Unavailable	7.6.1	None listed
7.4.0	`affected`	semver	Unavailable	7.4.7	None listed
7.2.0	`affected`	semver	Unavailable	7.2.12	None listed
7.0.0	`affected`	semver	Unavailable	7.0.19	None listed
2.0.0	`affected`	semver	Unavailable	2.0.14	None listed
1.2.1	`affected`	semver	Unavailable	1.2.13	None listed
01.02.00	`affected`	Unavailable	Unavailable	Unavailable	None listed
1.1.4	`affected`	semver	Unavailable	1.1.6	None listed
01.01.00	`affected`	semver	Unavailable	01.01.03	None listed
01.00.00	`affected`	semver	Unavailable	01.00.07	None listed

FortiManager Cloud

Vendor: Fortinet
Product: FortiManager Cloud
Platforms: Unknown
Default status: unaffected

FortiManager Cloud · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.6.2	`affected`	Unavailable	Unavailable	Unavailable	None listed
7.4.1	`affected`	semver	Unavailable	7.4.5	None listed
7.2.1	`affected`	semver	Unavailable	7.2.9	None listed
7.0.1	`affected`	semver	Unavailable	7.0.13	None listed
6.4.1	`affected`	semver	Unavailable	6.4.7	None listed

FortiAnalyzer

Vendor: Fortinet
Product: FortiAnalyzer
Platforms: Unknown
Default status: unaffected

FortiAnalyzer · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.6.0	`affected`	semver	Unavailable	7.6.2	None listed
7.4.0	`affected`	semver	Unavailable	7.4.5	None listed
7.2.0	`affected`	semver	Unavailable	7.2.9	None listed
7.0.0	`affected`	semver	Unavailable	7.0.13	None listed
6.4.0	`affected`	semver	Unavailable	6.4.15	None listed
6.2.0	`affected`	semver	Unavailable	6.2.13	None listed
6.0.0	`affected`	semver	Unavailable	6.0.12	None listed

FortiAnalyzer Cloud

Vendor: Fortinet
Product: FortiAnalyzer Cloud
Platforms: Unknown
Default status: unaffected

FortiAnalyzer Cloud · Scoped product and version facts
Version (version)	Status (status)	Version scheme (versionType)	Exclusive end (lessThan)	Inclusive end (lessThanOrEqual)	Status changes (at → status)
7.4.1	`affected`	semver	Unavailable	7.4.5	None listed
7.2.1	`affected`	semver	Unavailable	7.2.9	None listed
7.0.1	`affected`	semver	Unavailable	7.0.13	None listed
6.4.1	`affected`	semver	Unavailable	6.4.7	None listed