Hunting for Fortinet's CVE-2024-21762 | Grey Noise Blog
Summary: GreyNoise researcher h0wdy developed a detection for CVE-2024-21762, an out-of-bounds write vulnerability in Fortinet FortiOS and FortiProxy, after the flaw was added to CISA's Known Exploited Vulnerabilities Catalog. No writeup or proof of concept was available, so the researcher had to gather enough information independently to build the detection for GreyNoise sensors.
What you should know: The vulnerability's addition to CISA's KEV Catalog means it is being exploited in the wild, yet defenders had no public writeup or proof of concept to work from - detection depended on one researcher reconstructing the attack from scratch.
Read the original at GreyNoise Blog ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2024-21762
- Related
- CVE-2024-21762: Fortinet FortiOS Out-of-Bound Write Vulnerability Known Exploited Vulnerabilities · Feb 09, 2024Storm Watch | Cyber Insights | VMware Vulnerabilities, Microsoft's Russia Breach, and USB Hacks by Nation States Cyber Risks ·Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026