CVE-2024-40591

CVE-2024-40591 is an incorrect privilege assignment vulnerability in Fortinet's FortiOS. It affects versions 7.6.0, 7.4.0 through 7.4.4, 7.2.0 through 7.2.9, and versions prior to 7.0.15. An attacker, authenticated as an administrator with "Security Fabric" permissions, can exploit this flaw to escalate their privileges to the super-admin level. This is achieved by connecting the targeted FortiGate device to a malicious upstream FortiGate controlled by the attacker. This vulnerability allows privilege escalation within the FortiOS security fabric. Affected versions include 7.6.0, along with specific ranges within the 7.4, 7.2, and 7.0 branches. Exploitation requires the attacker to have existing administrative privileges and the "Security Fabric" permission enabled on their account. By manipulating the connection to a compromised upstream FortiGate, the attacker can gain the highest level of administrative control (super-admin).