Product:
FortiFone
Summary
An exposure of sensitive information to an unauthorized actor vulnerability in Fortinet FortiFone allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests. This affects multiple versions of the product, making it critical for users to be aware of the risks. The vulnerability is classified under CWE-200, indicating a serious breach of confidentiality.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-47855 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted HTTP or HTTPS requests to the affected FortiFone devices. Since the attack complexity is low and no authentication is required, this makes it easier for unauthorized actors to access sensitive device configurations. The attacker can leverage this information for further attacks or unauthorized access.
Affected Products
- FortiFone 7.0.0 – 7.0.1: Vulnerable to unauthorized access through crafted requests.
- FortiFone 3.0.13 – 3.0.23: Also susceptible to the same type of attacks allowing configuration exposure.
Mitigation
To mitigate this vulnerability, it is recommended that users upgrade to the latest versions of FortiFone that address this issue. Additionally, implementing network security measures such as firewalls and intrusion detection systems can help protect against unauthorized access attempts. Regularly monitoring device configurations and access logs can also aid in identifying potential exploitation attempts.