Product:
FortiOS
Summary
A heap-based buffer overflow vulnerability exists in Fortinet FortiOS versions 7.6.0 through 7.6.3, 7.4.0 through 7.4.8, 7.2.0 through 7.2.11, 7.0.0 through 7.0.17, 6.4.0 through 6.4.16, FortiSASE 25.2.b, FortiSASE 25.1.a.2, and FortiSwitchManager 7.2.0 through 7.2.6. This vulnerability allows an attacker to execute unauthorized code or commands by sending specially crafted packets.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.1 | CVE-2025-25249 |
Exploitation
To exploit this vulnerability, an attacker needs to send specially crafted packets to the affected Fortinet products. The high attack complexity indicates that the attacker may need to have specific knowledge of the target system and its configuration. Successful exploitation can lead to unauthorized code execution, potentially compromising the integrity and confidentiality of the system.
Affected Products
- FortiOS 7.6.0 through 7.6.3
- FortiOS 7.4.0 through 7.4.8
- FortiOS 7.2.0 through 7.2.11
- FortiOS 7.0.0 through 7.0.17
- FortiOS 6.4.0 through 6.4.16
- FortiSASE 25.2.b
- FortiSASE 25.1.a.2
- FortiSwitchManager 7.2.0 through 7.2.6
Mitigation
To mitigate this vulnerability, it is recommended to update affected Fortinet products to the latest versions that address this issue. Regularly applying security patches and updates can help protect against potential exploits. Additionally, monitoring network traffic for unusual patterns may help detect attempts to exploit this vulnerability.