CVE Daily

CVE-2024-48887

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allo...

Critical CVSS 9.8

Overview

A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated attacker to change admin passwords via a specially crafted request

CWE: CWE-620 Published: 2025-04-08T17:15:34.440
Risk analysis

This vulnerability is rated 🔴 CRITICAL.

  • CVSS: 9.8 (CRITICAL)
  • Detected tags: unauth_access (tag impact: HIGH)

Recommended actions:

  • Enforce authentication/authorization; reduce default endpoint exposure.

Recommended tools

Tags