{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-48887", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "state": "PUBLISHED", "assignerShortName": "fortinet", "dateReserved": "2024-10-09T09:03:09.960Z", "datePublished": "2025-04-08T16:52:02.152Z", "dateUpdated": "2025-04-09T04:00:33.735Z"}, "containers": {"cna": {"affected": [{"vendor": "Fortinet", "product": "FortiSwitch", "cpes": ["cpe:2.3:a:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.14:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*"], "defaultStatus": "unaffected", "versions": [{"version": "7.6.0", "status": "affected"}, {"versionType": "semver", "version": "7.4.0", "lessThanOrEqual": "7.4.4", "status": "affected"}, {"versionType": "semver", "version": "7.2.0", "lessThanOrEqual": "7.2.8", "status": "affected"}, {"versionType": "semver", "version": "7.0.0", "lessThanOrEqual": "7.0.10", "status": "affected"}, {"versionType": "semver", "version": "6.4.0", "lessThanOrEqual": "6.4.14", "status": "affected"}]}], "descriptions": [{"lang": "en", "value": "A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request"}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2025-04-08T16:52:20.257Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-620", "description": "Escalation of privilege", "type": "CWE"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.3, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C"}}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiSwitch version 7.6.1 or above \nPlease upgrade to FortiSwitch version 7.4.5 or above \nPlease upgrade to FortiSwitch version 7.2.9 or above \nPlease upgrade to FortiSwitch version 7.0.11 or above \nPlease upgrade to FortiSwitch version 6.4.15 or above"}], "references": [{"name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-435", "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-435"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-08T00:00:00+00:00", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3", "id": "CVE-2024-48887"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-09T04:00:33.735Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-48887", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-08T17:48:35.334873Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-08T17:48:39.950Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.3, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"cpes": ["cpe:2.3:a:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:7.0.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.14:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.13:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.12:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.11:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.10:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.9:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.8:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.7:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiswitch:6.4.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiSwitch", "versions": [{"status": "affected", "version": "7.6.0"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.4"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.8"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.10"}, {"status": "affected", "version": "6.4.0", "versionType": "semver", "lessThanOrEqual": "6.4.14"}], "defaultStatus": "unaffected"}], "solutions": [{"lang": "en", "value": "Please upgrade to FortiSwitch version 7.6.1 or above \nPlease upgrade to FortiSwitch version 7.4.5 or above \nPlease upgrade to FortiSwitch version 7.2.9 or above \nPlease upgrade to FortiSwitch version 7.0.11 or above \nPlease upgrade to FortiSwitch version 6.4.15 or above"}], "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-435", "name": "https://fortiguard.fortinet.com/psirt/FG-IR-24-435"}], "descriptions": [{"lang": "en", "value": "A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-620", "description": "Escalation of privilege"}]}], "providerMetadata": {"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "shortName": "fortinet", "dateUpdated": "2025-04-08T16:52:20.257Z"}}}, "cveMetadata": {"cveId": "CVE-2024-48887", "state": "PUBLISHED", "dateUpdated": "2025-04-09T04:00:33.735Z", "dateReserved": "2024-10-09T09:03:09.960Z", "assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8", "datePublished": "2025-04-08T16:52:02.152Z", "assignerShortName": "fortinet"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*", "matchCriteriaId": "1B371109-292C-4FCC-B15E-F16EE312BB13", "versionEndExcluding": "6.4.15", "versionStartIncluding": "6.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*", "matchCriteriaId": "5B11CFFF-42AB-40E5-8AA0-DCAB1364A2BD", "versionEndExcluding": "7.0.11", "versionStartIncluding": "7.0.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*", "matchCriteriaId": "038A829E-84FE-4B42-AE54-A6DE066EE59C", "versionEndExcluding": "7.2.9", "versionStartIncluding": "7.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*", "matchCriteriaId": "47E81562-F1B3-4759-B046-DC343FD7651A", "versionEndExcluding": "7.4.5", "versionStartIncluding": "7.4.0", "vulnerable": true}, {"criteria": "cpe:2.3:o:fortinet:fortiswitch:7.6.0:*:*:*:*:*:*:*", "matchCriteriaId": "31C81F91-69B3-4F98-9B5E-AD6C03E05638", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request"}, {"lang": "es", "value": "Una vulnerabilidad de cambio de contrase\u00f1a no verificada en la GUI de Fortinet FortiSwitch puede permitir que un atacante remoto no autenticado cambie las contrase\u00f1as de administrador a trav\u00e9s de una solicitud especialmente manipulada."}], "id": "CVE-2024-48887", "lastModified": "2025-07-23T16:03:34.897", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "psirt@fortinet.com", "type": "Secondary"}]}, "published": "2025-04-08T17:15:34.440", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-435"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-620"}], "source": "psirt@fortinet.com", "type": "Primary"}]}

{}

{}