CVE-2024-45325: Fortinet Fortiddos-F

Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days.

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerabilities [CWE-78] in Fortinet FortiDDoS-F version 7.0.0 through 7.02 and before 6.6.3 may allow a privileged attacker to execute unauthorized code or commands via crafted CLI requests.

Affected products

• Fortinet Fortiddos-F: from 6.1.0, before 7.0.3 (fixed in 7.0.3)

Published 2025-09-09. Last modified 2026-06-17.