[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fEFpLFMIuD-g8R6SaSoYGFaQsKQJBfL0aFgeMKc7C4dQ":3,"g5a-risk:CVE-2024-31496":130},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":27,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":52,"references":53,"referencesCount":59,"weaknesses":60,"weaknessesCount":74,"isActivelyExploited":75,"cisaInfo":27,"otxData":27,"relatedBlogPosts":76,"seoMetadata":77,"configurations":102,"relatedVendorCves":125,"notableEvents":126},"CVE-2024-31496","What is CVE-2024-31496?","A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData 7.4.0 and before 7.2.7 allows a privileged attacker to execute unauthorized code or commands via crafted CLI requests.","A stack-based buffer overflow vulnerability [CWE-121] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 thro...","2024-11-12T19:15:08.617","2025-01-21T22:11:48.16",6.7,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":27,"CVSSMetricV2":27,"CVSSMetricV40":27},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","LOCAL","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,0.8,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":23,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},0.00228,[34,34,34,34,34,34,34],"Medium",[38,43,46,49],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"fortinet","fortianalyzer","*","cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":41,"criteria":45,"vulnerable":4},"fortianalyzer_big_data","cpe:2.3:a:fortinet:fortianalyzer_big_data:*:*:*:*:*:*:*:*",{"vendor":39,"product":44,"version":47,"criteria":48,"vulnerable":4},"7.4.0","cpe:2.3:a:fortinet:fortianalyzer_big_data:7.4.0:*:*:*:*:*:*:*",{"vendor":39,"product":50,"version":41,"criteria":51,"vulnerable":4},"fortimanager","cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*",4,[54],{"url":55,"source":56,"tags":57},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-24-098","Fortinet",[58],"Vendor Advisory",1,[61,69],{"id":62,"name":63,"description":64,"extendedDescription":65,"status":66,"abstraction":67,"structure":68},"CWE-121","Stack-based Buffer Overflow","A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).","","Draft","Variant","Simple",{"id":70,"name":71,"description":72,"extendedDescription":65,"status":66,"abstraction":73,"structure":68},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Base",2,false,[],{"title":78,"metaDescription":79,"keywords":80,"canonicalUrl":81,"structuredData":82},"What is CVE-2024-31496? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2024-31496, a medium severity cyber security vulnerability from 2024. A stack-based buffer overflow vulnerability [CWE-121] in ...","CVE-2024-31496, CVE-2024-31496 vulnerability, CVE-2024-31496 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, fortinet security, fortianalyzer vulnerability, fortianalyzer_big_data vulnerability, fortimanager vulnerability","\u002Fwhat-is\u002Fcve-2024-31496",{"@context":83,"@type":84,"headline":78,"description":79,"datePublished":10,"dateModified":11,"author":85,"publisher":89,"about":93,"mainEntityOfPage":97,"articleSection":100,"keywords":101},"https:\u002F\u002Fschema.org","TechArticle",{"@type":86,"name":87,"url":88},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":86,"name":87,"url":88,"logo":90},{"@type":91,"url":92},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":94,"name":6,"description":95,"additionalType":96},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":98,"@id":99},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2024-31496","Cybersecurity","CVE-2024-31496, CVE-2024-31496 vulnerability, CVE-2024-31496 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[103],{"Operator":27,"Negate":27,"Nodes":104},[105],{"Operator":106,"Negate":27,"CPEMatch":107},"OR",[108,112,115,119,121,123],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":109,"VersionStartExcluding":27,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":27},"FF6CA5B2-29DE-4FB3-8D7D-D248A593AB79","6.2.0","7.2.6",{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":113,"VersionStartExcluding":27,"VersionStartIncluding":47,"VersionEndExcluding":114,"VersionEndIncluding":27},"AF309EFD-1770-44AF-B192-3D9816F792CB","7.4.3",{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":116,"VersionStartExcluding":27,"VersionStartIncluding":117,"VersionEndExcluding":118,"VersionEndIncluding":27},"1A9C272F-2E14-4BC3-B3A3-1EF4E93BDBFF","6.2.1","7.2.8",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"80598594-A45A-4E69-B968-1DD3DBD30FF9",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":122,"VersionStartExcluding":27,"VersionStartIncluding":110,"VersionEndExcluding":111,"VersionEndIncluding":27},"A3F113AF-AA71-466D-9841-15A5243ECFF0",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":124,"VersionStartExcluding":27,"VersionStartIncluding":47,"VersionEndExcluding":114,"VersionEndIncluding":27},"E4490512-36ED-4212-9D34-D74739A56E84",[],[],{"lastModified":11,"cacheTime":128,"version":129},1792368018722,"2.0",{"score":131,"band":132,"action":133,"scoredAt":134},23,"Low","Monitor","2026-10-16T07:04:30.764777+00:00"]