Impact

Successful exploitation of this vulnerability allows an unauthorized actor to bypass security mechanisms on the FortiManager appliance. This could lead to a loss of centralized oversight, unauthorized configuration changes, or further compromise of the managed network perimeter. The extent of potential damage includes full control over the management plane, which would enable the attacker to modify firewall rules, push malicious policies to downstream FortiGate devices, or exfiltrate sensitive configuration data.

Recommendation

Prioritize patching for Fortinet FortiManager across all environments, specifically targeting the version ranges identified by Fortinet PSIRT associated with CVE-2024-47575. Restrict access to FortiManager management interfaces (typically ports 443, 8443, and 541) to known administrative subnets at the network level until patches are verified. Review logs for unexpected authentication requests or anomalies in administrative traffic patterns directed at the FortiManager web-based or CLI management endpoints.