Buffer overflow in Fortinet Fortianalyzer
CVE-2024-50571
A heap-based buffer overflow vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.5, FortiAnalyzer 7.2.0 through 7.2.9, FortiAnalyzer 7.0.0 through 7.0.13, FortiAnalyzer 6.4 all versions, FortiAnalyz…
Vulnerability class: Buffer Overflow
EPSS: 0.001 (25.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:R.
Affected products
- Fortinet Fortianalyzer — versions 7.6.0, 7.4.0, 7.2.0
- Fortinet Fortianalyzer Cloud — versions 7.4.1, 7.2.1, 7.0.1
- Fortinet Fortimanager — versions 7.6.0, 7.4.0, 7.2.0
- Fortinet Fortimanager Cloud — versions 7.6.2, 7.4.1, 7.2.1
- Fortinet Fortios — versions 7.6.0, 7.4.0, 7.2.0
- Fortinet Fortiproxy — versions 7.6.0, 7.4.0, 7.2.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2024-50571?
- CVE-2024-50571 is a medium-severity vulnerability in Fortinet Fortianalyzer, classified under Heap-based Buffer Overflow. CVSS score: 6.5/10. Published 2025-10-14.
- How severe is CVE-2024-50571?
- Medium severity. CVSS v3 base score is 6.5 out of 10.