{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/fortiswitchmanager--7.2.3/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*","cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*","cpe:2.3:o:fortinet:fortipam:1.2.0:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.8,"id":"CVE-2024-23113"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Fortiproxy (\u003c= 7.4.2)","Fortiswitchmanager (\u003c= 7.2.3)","Fortios (\u003c= 7.4.2)","Fortipam (\u003c= 1.2.0)"],"_cs_severities":["critical"],"_cs_tags":["vulnerability","rce","network","fortinet"],"_cs_type":"advisory","_cs_vendors":["Fortinet"],"content_html":"\u003cp\u003eCVE-2024-23113 is a critical format string vulnerability affecting the FortiGate FGFM (FortiGate to FortiManager) protocol service. The service, which facilitates management communication, listens on TCP port 541. Improper handling of input strings allows an unauthenticated attacker to inject format specifiers, such as %n, which may result in remote code execution (RCE) or denial-of-service due to memory corruption. Public exploit code is available that targets this service by sending malformed payloads and monitoring for service-level SSL alerts or connection resets indicative of an exploit attempt.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eThe vulnerability is rated at CVSS 9.8. Successful exploitation enables unauthenticated remote code execution with high impact on confidentiality, integrity, and availability. Exposure is increased due to the availability of functional proof-of-concept exploit scripts.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eInventory all internet-facing FortiGate, Fortiproxy, Fortiswitchmanager, and Fortipam assets.\u003c/li\u003e\n\u003cli\u003eRestrict access to TCP port 541 (FGFM) to trusted management IP addresses only.\u003c/li\u003e\n\u003cli\u003eApply vendor-provided security patches immediately to address the vulnerability in the affected versions of FortiOS, Fortiproxy, Fortiswitchmanager, and Fortipam.\u003c/li\u003e\n\u003cli\u003eImplement network-level monitoring to detect anomalous traffic patterns targeting port 541, specifically patterns containing common format string specifiers.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-11-01T03:44:10Z","date_published":"2026-11-01T03:44:10Z","id":"https://feed.craftedsignal.io/briefs/2026-11-cve-2024-23113/","summary":"A format string vulnerability (CVE-2024-23113) in the FortiGate FGFM service on TCP port 541 allows unauthenticated remote code execution via specially crafted input.","title":"Fortinet FortiOS and related products: Format string vulnerability in FGFM service (CVE-2024-23113)","url":"https://feed.craftedsignal.io/briefs/2026-11-cve-2024-23113/"}],"language":"en","title":"CraftedSignal Threat Feed - Fortiswitchmanager (\u003c= 7.2.3)","version":"https://jsonfeed.org/version/1.1"}