What is CVE-2021-24008?

CVE-2021-24008 is a medium-severity vulnerability in Fortinet Fortiddos, classified under Information Disclosure. CVSS score: 5.0/10. Published 2025-03-28.

How severe is CVE-2021-24008?

Medium severity. CVSS v3 base score is 5.0 out of 10.

Information disclosure in Fortinet Fortiddos

CVE-2021-24008

An exposure of sensitive system information to an unauthorized control sphere vulnerability [CWE-497] in FortiDDoS version 5.4.0, version 5.3.2 and below, version 5.2.0, version 5.1.0, version 5.0.0, version 4.7.0, version 4.6.0, version 4…

Vulnerability class: Information Disclosure

EPSS: 0.003 (48.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.0 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N/E:P/RL:X/RC:X.

Affected products

Fortinet Fortiddos — versions 5.4.0, 5.3.0, 5.2.0
Fortinet Fortiddos-cm — versions 5.3.0, 5.2.0, 5.1.0
Fortinet Fortindr — versions 1.5.0, 1.4.0, 1.3.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

https://fortiguard.fortinet.com/psirt/FG-IR-20-105

Frequently asked questions

What is CVE-2021-24008?: CVE-2021-24008 is a medium-severity vulnerability in Fortinet Fortiddos, classified under Information Disclosure. CVSS score: 5.0/10. Published 2025-03-28.
How severe is CVE-2021-24008?: Medium severity. CVSS v3 base score is 5.0 out of 10.