An incorrect parsing of numbers with different radices vulnerability [CWE-1389] in FortiProxy version 7.4.3 and below, version 7.2.10 and below, version 7.0.17 and below and FortiOS version 7.4.3 and below, version 7.2.8 and below, version 7.0.15 and below IP address validation feature may permit an unauthenticated attacker to bypass the IP blocklist via crafted requests.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Fortinet Fortiproxy | — | Upgrade FortiProxy to 7.2.11Upgrade FortiProxy to 7.4.4Upgrade to the latest version of FortiProxy | Sep 30, 2026 | Jul 9, 2024 |
| Fortios | — | Upgrade to the latest version of FortiOSUpgrade FortiOS to 7.4.4Upgrade FortiOS to 7.2.9 | Sep 12, 2024 | Jul 9, 2024 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub