CVE-2024-55599
At a glance Severity MEDIUM 4.9 EPSS EPSS 0.40 % · percentile 34 (2026-10-27) State PUBLISHED Published 2025-07-08 Updated 2026-10-15 Assigner fortinet NVD status Modified Description An Improperly Implemented Security Check for Standard vulnerability [CWE-358] in FortiOS version 7.6.0, version 7.4.7 and below, 7.0 all versions, 6.4 all versions and FortiProxy version 7.6.1 and below, version 7.4.8 and below, 7.2 all versions, 7.0 all versions may allow a remote unauthenticated user to bypass the DNS filter via Apple devices.
Scores Version Score Vector Scored by CVSS 3.1 MEDIUM 4.9 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:U/RL:X/RC:X fortinet CVSS 3.1 MEDIUM 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N NVD · psirt@fortinet.com (Secondary)
Weaknesses (CWE)
European references
CERT-FR advisories
Affected configurations (NVD CPE) cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.4.9cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:* ≥ 7.6.0 < 7.6.2cpe:2.3:a:fortinet:fortisase:24.4.32:*:*:*:-:*:*:*cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 6.4.0 < 7.2.11cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.4.0 < 7.4.8cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*Affected products Product Versions Fortinet · FortiOS affected 7.6.0 ; affected 7.4.0 ≤ 7.4.7 ; affected 7.2.0 ≤ 7.2.10 ; affected 7.0.0 ≤ 7.0.17 ; affected 6.4.0 ≤ 6.4.16 Fortinet · FortiProxy affected 7.6.0 ≤ 7.6.1 ; affected 7.4.0 ≤ 7.4.8 ; affected 7.2.0 ≤ 7.2.14 ; affected 7.0.0 ≤ 7.0.21
References
Sources
