Cyber Posture

CVE-2024-55597

Medium

Published: 11 March 2025

Published
11 March 2025
Modified
24 July 2025
KEV Added
—
Patch
—
CVSS Score 5.5 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H
EPSS Score 0.0014 33.4th percentile
Risk Priority 11 60% EPSS · 20% KEV · 20% CVSS

Description

Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries.

Security Summary

CVE-2024-55597 is a path traversal vulnerability (CWE-22) in Fortinet FortiWeb versions 7.0.0 through 7.6.0. The issue arises from an improper limitation of a pathname to a restricted directory, which allows attackers to execute unauthorized code or commands via crafted requests.

The vulnerability has a CVSS v3.1 base score of 5.5 (AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). It can be exploited over the network by an attacker with high privileges, requiring low complexity and no user interaction. Successful exploitation enables low integrity impact and high availability impact, with no confidentiality impact.

Mitigation details are provided in the Fortinet PSIRT advisory at https://fortiguard.fortinet.com/psirt/FG-IR-24-439.

Details

CWE(s)
CWE-22

Affected Products

fortinet
fortiweb
7.6.0 · 7.0.0 — 7.4.6

MITRE ATT&CK Enterprise Techniques

T1190 Exploit Public-Facing Application Initial Access
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network.
attack.mitre.org →
T1059 Command and Scripting Interpreter Execution
Adversaries may abuse command and script interpreters to execute commands, scripts, or binaries.
attack.mitre.org →
Why these techniques?

Path traversal in public-facing FortiWeb enables crafted requests for unauthorized code/command execution, mapping to exploitation of internet-facing applications (T1190) and command/scripting interpreters (T1059).

Confidence: MEDIUM · MITRE ATT&CK Enterprise v19.0

References