vulnerability

Fortinet FortiClientEMS: CVE-2024-32119: Telemetry protocol authentication is based over VDOM and FCTUID

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:P)

Published

Jun 10, 2025

Added

Jun 19, 2025

Modified

Mar 25, 2026

Description

An improper authentication vulnerability [CWE-287] in FortiClientEMS telemetry protocol may allow an unauthenticated attacker with the knowledge of the targeted user's FCTUID and VDOM to perform operations such as uploading or tagging on behalf of the targeted user via specially crafted TCP requests.

Solution

fortinet-forticlientems-upgrade-latest

References

CWE-1390
CVE-2024-32119
https://attackerkb.com/topics/CVE-2024-32119
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-32119
https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2024-32119
https://www.fortiguard.com/psirt/FG-IR-23-375
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-29940

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report