Vendors and CVEs › CVEs › CVE-2024-47575
CVE-2024-47575: what it is, who is affected and what to do
Unit 42 found attackers exploited FortiManager flaw CVE-2024-47575 at a telecoms managed service provider in September 2024, stealing data tied to over 500 FortiGate firewalls. They also used FortiOS flaw CVE-2025-61624 to deploy Peerstitch, malware that runs in memory.
- Scores and exploitation. The stories below cover this flaw together with others, so the Brief does not give its scores here: check the records below.
- Records. CVE-2024-47575 on the National Vulnerability Database · CISA’s known exploited catalog
The story
High Known exploited
Fortinet flaws used to plant hidden malware on firewalls
Unit 42 found attackers exploited FortiManager flaw CVE-2024-47575 at a telecoms managed service provider in September 2024, stealing data tied to over 500 FortiGate firewalls.