watchtowrlabs/fortios-auth-bypass-check-cve-2024-55591
A Fortinet FortiOS Authentication Bypass Vulnerable Behaviour Detection
python CVE-2024-55591-check.py --target 192.168.1.10 --port 443
__ ___ ___________
__ _ ______ _/ |__ ____ | |_\__ ____\____ _ ________
\ \/ \/ \__ \ ___/ ___\| | \\| | / _ \ \/ \/ \_ __ \
\ / / __ \| | \ \\___| Y | |( <_> \ / | | \
\/\_/ (____ |__| \\\\___ |___|__|__ | \\__ / \\/\_/ |__|
\\ \\ \\
CVE-2024-55591.py
(*) Fortinet FortiOS Authentication Bypass (CVE-2024-55591) vulnerable detection by watchTowr
- Sonny , watchTowr ([email protected])
- Aliz Hammond, watchTowr ([email protected])
CVEs: [CVE-2024-55591]
[*] Targeting: https://192.168.1.10:443
[!] VULNERABLE: All conditions were met
This script attempts to create a WebSocket connection at a random URI from a pre-authenticated perspective to the FortiOS management interface, and reviews the response to determine if the instance is vulnerable.
More details at Fortinet advisory
This detection mechanism doesn't support FortiProxy.
For the latest security research follow the watchTowr Labs Team