← Database

CVE-2024-40587

MEDIUM CVSS: 6.7 Published: 2025-01-14 Modified: 2026-06-17

Description

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in Fortinet FortiVoice version 7.0.0 through 7.0.4 and before 6.4.9 allows an authenticated privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Affected Platforms

Fortinet Fortivoice

Weakness Type

CWE-78

References