Skip to content
Vol. 1 · Ed. 2026
CyberGlossary
Entry № 477

Fortinet FortiOS / FortiManager 2024 Zero-Days

Qu'est-ce que Fortinet FortiOS / FortiManager 2024 Zero-Days ?

Fortinet FortiOS / FortiManager 2024 Zero-DaysA 2024 series of pre-authentication vulnerabilities in Fortinet FortiOS, FortiProxy, FortiManager and the FortiGate SSL-VPN — including the FortiManager fgfmd flaw CVE-2024-47575 ('FortiJump') — exploited as zero-days by Chinese state-aligned actors.


Throughout 2024 Fortinet products were repeatedly targeted with pre-authentication zero-day vulnerabilities, especially in the FortiGate SSL-VPN service and in FortiManager's fgfmd protocol. The headline issue, CVE-2024-47575 ('FortiJump', disclosed October 2024, CVSS 9.8), is a missing-authentication flaw in FortiManager's fgfmd device-registration channel that lets an unauthenticated remote attacker register a malicious FortiGate, execute commands on the FortiManager, and pivot to manage every connected device. Mandiant attributed exploitation to UNC5820 (a China-nexus cluster) and observed compromise of dozens of FortiManagers before the patch and even some after. Other 2024 cases include CVE-2024-21762 (FortiOS SSL-VPN out-of-bound write, CVSS 9.6), CVE-2024-23113 (fgfmd format-string, CVSS 9.8), CVE-2024-55591 (Node.js websocket auth bypass in FortiOS), and CVE-2024-50603 (Aviatrix-style command injection). All were added to the CISA KEV catalog. The pattern reinforced that internet-exposed network-edge appliances remain a primary initial-access surface, especially for state-aligned actors building VPN-mediated footholds.

Exemples

  1. 01

    An MSSP's internet-exposed FortiManager is compromised via CVE-2024-47575 before its operator gets to patch; UNC5820 pushes config changes to dozens of customer FortiGates.

  2. 02

    An enterprise enforces a 'no FortiGate management interface on the public internet' policy and configures FortiManager fgfmd to whitelist device certs after the FortiJump advisory.

Questions fréquentes

Qu'est-ce que Fortinet FortiOS / FortiManager 2024 Zero-Days ?

A 2024 series of pre-authentication vulnerabilities in Fortinet FortiOS, FortiProxy, FortiManager and the FortiGate SSL-VPN — including the FortiManager fgfmd flaw CVE-2024-47575 ('FortiJump') — exploited as zero-days by Chinese state-aligned actors. Cette notion relève de la catégorie Vulnérabilités en cybersécurité.

Que signifie Fortinet FortiOS / FortiManager 2024 Zero-Days ?

A 2024 series of pre-authentication vulnerabilities in Fortinet FortiOS, FortiProxy, FortiManager and the FortiGate SSL-VPN — including the FortiManager fgfmd flaw CVE-2024-47575 ('FortiJump') — exploited as zero-days by Chinese state-aligned actors.

Comment fonctionne Fortinet FortiOS / FortiManager 2024 Zero-Days ?

Throughout 2024 Fortinet products were repeatedly targeted with pre-authentication zero-day vulnerabilities, especially in the FortiGate SSL-VPN service and in FortiManager's fgfmd protocol. The headline issue, CVE-2024-47575 ('FortiJump', disclosed October 2024, CVSS 9.8), is a missing-authentication flaw in FortiManager's fgfmd device-registration channel that lets an unauthenticated remote attacker register a malicious FortiGate, execute commands on the FortiManager, and pivot to manage every connected device. Mandiant attributed exploitation to UNC5820 (a China-nexus cluster) and observed compromise of dozens of FortiManagers before the patch and even some after. Other 2024 cases include CVE-2024-21762 (FortiOS SSL-VPN out-of-bound write, CVSS 9.6), CVE-2024-23113 (fgfmd format-string, CVSS 9.8), CVE-2024-55591 (Node.js websocket auth bypass in FortiOS), and CVE-2024-50603 (Aviatrix-style command injection). All were added to the CISA KEV catalog. The pattern reinforced that internet-exposed network-edge appliances remain a primary initial-access surface, especially for state-aligned actors building VPN-mediated footholds.

Comment se défendre contre Fortinet FortiOS / FortiManager 2024 Zero-Days ?

Les défenses contre Fortinet FortiOS / FortiManager 2024 Zero-Days combinent habituellement des contrôles techniques et des pratiques opérationnelles, comme détaillé dans la définition ci-dessus.

Quels sont les autres noms de Fortinet FortiOS / FortiManager 2024 Zero-Days ?

Noms alternatifs courants : FortiJump, CVE-2024-47575, CVE-2024-21762.

Termes liés