Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2025-52970 (GCVE-0-2025-52970)
Vulnerability from cvelistv5 – Published: 2025-08-12 18:59 – Updated: 2026-01-14 13:46Summary
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.
Severity
SSVC
Exploitation: poc
Automatable: no
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-233 - Improper access control
Assigner
References
2 references
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Fortinet | FortiWeb |
Affected:
7.6.0 , ≤ 7.6.3
(semver)
Affected: 7.4.0 , ≤ 7.4.7 (semver) Affected: 7.2.0 , ≤ 7.2.10 (semver) Affected: 7.0.0 , ≤ 7.0.10 (semver) cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:* cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:* |
KEVintel KEV
Known Exploited Vulnerability - GCVE BCP-07 Compliant
KEV entry ID: 1f62decd-ba75-45ae-a679-211dfbaa2e51
Exploited: Yes
Timestamps
First Seen: 2025-08-18
Asserted: 2025-08-18
Scope
Notes: KEVIntel entry: A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10... | Affected: Fortinet / FortiWeb | CVSS: 7.7 (HIGH) | Used in malware: unknown | Not yet in CISA KEV: True
Evidence
Type: Public Report
Signal: Successful Exploitation
Confidence: 70%
Source: kevintel
Details
| Feed | KEVIntel (kevintel.com) |
|---|---|
| Title | A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10... |
| Vendor | Fortinet |
| Product | FortiWeb |
| Added Date | 2025-08-18T14:08:46.000Z |
| Cvss Score | 7.7 |
| Epss Score | None |
| Cvss Severity | HIGH |
| Epss Percentile | None |
| Used In Malware | unknown |
| Ahead Of Cisa Kev | None |
| Not Yet In Cisa Kev | True |
References
Created: 2026-06-19 12:45 UTC
| Updated: 2026-06-19 12:45 UTC
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2025-52970",
"options": [
{
"Exploitation": "poc"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-18T12:41:47.892664Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-08-18T12:44:51.339Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"references": [
{
"tags": [
"exploit"
],
"url": "https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970"
}
],
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [
"cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "FortiWeb",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.6.3",
"status": "affected",
"version": "7.6.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.4.7",
"status": "affected",
"version": "7.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.10",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.10",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-233",
"description": "Improper access control",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-01-14T13:46:48.378Z",
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet"
},
"references": [
{
"name": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448"
}
],
"solutions": [
{
"lang": "en",
"value": "Upgrade to FortiWeb version 8.0.0 or above\nUpgrade to FortiWeb version 7.6.4 or above\nUpgrade to FortiWeb version 7.4.8 or above\nUpgrade to FortiWeb version 7.2.11 or above\nUpgrade to FortiWeb version 7.0.11 or above"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"assignerShortName": "fortinet",
"cveId": "CVE-2025-52970",
"datePublished": "2025-08-12T18:59:25.817Z",
"dateReserved": "2025-06-23T17:39:27.214Z",
"dateUpdated": "2026-01-14T13:46:48.378Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2025-52970",
"date": "2026-06-19",
"epss": "0.1067",
"percentile": "0.95238"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2025-52970\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2025-08-12T19:15:32.277\",\"lastModified\":\"2025-08-15T12:26:38.300\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.\"},{\"lang\":\"es\",\"value\":\"Un manejo inadecuado de los par\u00e1metros en Fortinet FortiWeb versiones 7.6.3 y anteriores, versiones 7.4.7 y anteriores, versiones 7.2.10 y anteriores, y 7.0.10 y anteriores puede permitir que un atacante remoto no autenticado con informaci\u00f3n no p\u00fablica perteneciente al dispositivo y al usuario objetivo obtenga privilegios de administrador en el dispositivo a trav\u00e9s de una solicitud especialmente manipulada.\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":8.1,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":5.9}]},\"weaknesses\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-233\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.11\",\"matchCriteriaId\":\"7E739890-CFEA-4B7B-B78D-8CC8157BDF54\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.11\",\"matchCriteriaId\":\"B642678E-4E31-4A6B-A791-ACD5D332B175\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.4.0\",\"versionEndExcluding\":\"7.4.8\",\"matchCriteriaId\":\"CA8DE17C-1756-4B18-A956-A52CFA0967B9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.6.0\",\"versionEndExcluding\":\"7.6.4\",\"matchCriteriaId\":\"2B739434-1979-43F9-AEC1-D287B1BCA5CA\"}]}]}],\"references\":[{\"url\":\"https://fortiguard.fortinet.com/psirt/FG-IR-25-448\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970\",\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"tags\":[\"Exploit\",\"Third Party Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-52970\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"poc\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-08-18T12:41:47.892664Z\"}}}], \"references\": [{\"url\": \"https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970\", \"tags\": [\"exploit\"]}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-08-12T19:42:54.881Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.7, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:X/RC:C\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [\"cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiWeb\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.6.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.6.3\"}, {\"status\": \"affected\", \"version\": \"7.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.4.7\"}, {\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.10\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.10\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Upgrade to FortiWeb version 8.0.0 or above\\nUpgrade to FortiWeb version 7.6.4 or above\\nUpgrade to FortiWeb version 7.4.8 or above\\nUpgrade to FortiWeb version 7.2.11 or above\\nUpgrade to FortiWeb version 7.0.11 or above\"}], \"references\": [{\"url\": \"https://fortiguard.fortinet.com/psirt/FG-IR-25-448\", \"name\": \"https://fortiguard.fortinet.com/psirt/FG-IR-25-448\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-233\", \"description\": \"Improper access control\"}]}], \"providerMetadata\": {\"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\", \"dateUpdated\": \"2026-01-14T13:46:48.378Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2025-52970\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-01-14T13:46:48.378Z\", \"dateReserved\": \"2025-06-23T17:39:27.214Z\", \"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"datePublished\": \"2025-08-12T18:59:25.817Z\", \"assignerShortName\": \"fortinet\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
CERTFR-2025-AVI-0679
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Fortinet indique avoir connaissance de code d'exploitation public pour la vulnérabilité CVE-2025-25256.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Fortinet | FortiOS | FortiOS versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiRecorder | FortiRecorder versions antérieures à 7.0.5 | ||
| Fortinet | FortiMail | FortiMail versions antérieures à 7.4.4 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.1.x antérieures à 7.1.8 | ||
| Fortinet | FortiManager | FortiManager versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiManager | FortiManager versions antérieures à 7.0.14 | ||
| Fortinet | FortiNDR | FortiNDR versions antérieures à 7.4.7 | ||
| Fortinet | FortiNDR | FortiNDR versions 7.6.x antérieures à 7.6.1 | ||
| Fortinet | FortiManager | FortiManager versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.6.x antérieures à 7.6.4 | ||
| Fortinet | FortiManager | FortiManager versions 7.2.x antérieures à 7.2.10 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.2.x antérieures à 7.2.11 | ||
| Fortinet | FortiVoice | FortiVoice versions 7.0.x antérieures à 7.0.5 | ||
| Fortinet | FortiSOAR | FortiSOAR versions antérieures à 7.5.2 | ||
| Fortinet | FortiOS | FortiOS versions antérieures à 7.4.8 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.5.x antérieures à 1.5.1 | ||
| Fortinet | FortiCamera | FortiCamera versions 2.1.x toutes versions | ||
| Fortinet | FortiWeb | FortiWeb versions 7.0.x antérieures à 7.0.11 | ||
| Fortinet | FortiPAM | FortiPAM versions antérieures à 1.4.3 | ||
| Fortinet | FortiSwitchManager | FortiSwitchManager versions 7.2.x antérieures à 7.2.4 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.4.x antérieures à 7.4.9 | ||
| Fortinet | FortiManager | FortiManager Cloud versions antérieures à 7.2.10 | ||
| Fortinet | FortiSwitchManager | FortiSwitchManager versions 7.0.x antérieures à 7.0.4 | ||
| Fortinet | FortiMail | FortiMail versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiProxy | FortiProxy versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.3.x antérieures à 7.3.2 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.2.x antérieures à 7.2.6 | ||
| Fortinet | FortiSIEM | FortiSIEM versions antérieures à 6.7.10 | ||
| Fortinet | FortiADC | FortiADC versions 7.2.x antérieures à 7.2.1 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.0.x antérieures à 7.0.4 | ||
| Fortinet | FortiCamera | FortiCamera versions antérieures à 2.0.1 | ||
| Fortinet | FortiManager | FortiManager Cloud versions 7.4.x antérieures à 7.4.6 | ||
| Fortinet | FortiProxy | FortiProxy versions antérieures à 7.4.4 | ||
| Fortinet | FortiVoice | FortiVoice versions antérieures à 6.4.10 | ||
| Fortinet | FortiADC | FortiADC versions antérieures à 7.1.2 | ||
| Fortinet | FortiRecorder | FortiRecorder versions 7.2.x antérieures à 7.2.2 | ||
| Fortinet | FortiSOAR | FortiSOAR versions 7.6.x antérieures à 7.6.2 |
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "FortiOS versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiRecorder versions ant\u00e9rieures \u00e0 7.0.5",
"product": {
"name": "FortiRecorder",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiMail versions ant\u00e9rieures \u00e0 7.4.4",
"product": {
"name": "FortiMail",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.1.x ant\u00e9rieures \u00e0 7.1.8",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions ant\u00e9rieures \u00e0 7.0.14",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiNDR versions ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiNDR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiNDR versions 7.6.x ant\u00e9rieures \u00e0 7.6.1",
"product": {
"name": "FortiNDR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.6.x ant\u00e9rieures \u00e0 7.6.4",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.2.x ant\u00e9rieures \u00e0 7.2.10",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.2.x ant\u00e9rieures \u00e0 7.2.11",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiVoice versions 7.0.x ant\u00e9rieures \u00e0 7.0.5",
"product": {
"name": "FortiVoice",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSOAR versions ant\u00e9rieures \u00e0 7.5.2",
"product": {
"name": "FortiSOAR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions ant\u00e9rieures \u00e0 7.4.8",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.5.x ant\u00e9rieures \u00e0 1.5.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiCamera versions 2.1.x toutes versions",
"product": {
"name": "FortiCamera",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.0.x ant\u00e9rieures \u00e0 7.0.11",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions ant\u00e9rieures \u00e0 1.4.3",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSwitchManager versions 7.2.x ant\u00e9rieures \u00e0 7.2.4",
"product": {
"name": "FortiSwitchManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.4.x ant\u00e9rieures \u00e0 7.4.9",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager Cloud versions ant\u00e9rieures \u00e0 7.2.10",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSwitchManager versions 7.0.x ant\u00e9rieures \u00e0 7.0.4",
"product": {
"name": "FortiSwitchManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiMail versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiMail",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.3.x ant\u00e9rieures \u00e0 7.3.2",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.2.x ant\u00e9rieures \u00e0 7.2.6",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions ant\u00e9rieures \u00e0 6.7.10",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.2.x ant\u00e9rieures \u00e0 7.2.1",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.0.x ant\u00e9rieures \u00e0 7.0.4",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiCamera versions ant\u00e9rieures \u00e0 2.0.1",
"product": {
"name": "FortiCamera",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager Cloud versions 7.4.x ant\u00e9rieures \u00e0 7.4.6",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions ant\u00e9rieures \u00e0 7.4.4",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiVoice versions ant\u00e9rieures \u00e0 6.4.10",
"product": {
"name": "FortiVoice",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions ant\u00e9rieures \u00e0 7.1.2",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiRecorder versions 7.2.x ant\u00e9rieures \u00e0 7.2.2",
"product": {
"name": "FortiRecorder",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSOAR versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiSOAR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-25248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25248"
},
{
"name": "CVE-2025-47857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47857"
},
{
"name": "CVE-2025-32766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32766"
},
{
"name": "CVE-2024-48892",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-48892"
},
{
"name": "CVE-2025-53744",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53744"
},
{
"name": "CVE-2024-52964",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52964"
},
{
"name": "CVE-2025-49813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49813"
},
{
"name": "CVE-2025-25256",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25256"
},
{
"name": "CVE-2025-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52970"
},
{
"name": "CVE-2025-27759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27759"
},
{
"name": "CVE-2025-32932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32932"
},
{
"name": "CVE-2024-26009",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26009"
},
{
"name": "CVE-2024-40588",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40588"
},
{
"name": "CVE-2023-45584",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45584"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0679",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Fortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nFortinet indique avoir connaissance de code d\u0027exploitation public pour la vuln\u00e9rabilit\u00e9 CVE-2025-25256.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-501",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-501"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-421",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-421"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-173",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-173"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-152",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-152"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-042",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-042"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-150",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-150"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-383",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-383"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-364",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-364"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-253",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-253"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-309",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-309"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-513",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-513"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-448",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-448"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-473",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-473"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-209",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-209"
}
]
}
CERTFR-2025-AVI-0679
Vulnerability from certfr_avis - Published: - Updated:
De multiples vulnérabilités ont été découvertes dans les produits Fortinet. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Fortinet indique avoir connaissance de code d'exploitation public pour la vulnérabilité CVE-2025-25256.
Solutions
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).
Impacted products
| Vendor | Product | Description | ||
|---|---|---|---|---|
| Fortinet | FortiOS | FortiOS versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiRecorder | FortiRecorder versions antérieures à 7.0.5 | ||
| Fortinet | FortiMail | FortiMail versions antérieures à 7.4.4 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.1.x antérieures à 7.1.8 | ||
| Fortinet | FortiManager | FortiManager versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiManager | FortiManager versions antérieures à 7.0.14 | ||
| Fortinet | FortiNDR | FortiNDR versions antérieures à 7.4.7 | ||
| Fortinet | FortiNDR | FortiNDR versions 7.6.x antérieures à 7.6.1 | ||
| Fortinet | FortiManager | FortiManager versions 7.4.x antérieures à 7.4.7 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.6.x antérieures à 7.6.4 | ||
| Fortinet | FortiManager | FortiManager versions 7.2.x antérieures à 7.2.10 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.2.x antérieures à 7.2.11 | ||
| Fortinet | FortiVoice | FortiVoice versions 7.0.x antérieures à 7.0.5 | ||
| Fortinet | FortiSOAR | FortiSOAR versions antérieures à 7.5.2 | ||
| Fortinet | FortiOS | FortiOS versions antérieures à 7.4.8 | ||
| Fortinet | FortiPAM | FortiPAM versions 1.5.x antérieures à 1.5.1 | ||
| Fortinet | FortiCamera | FortiCamera versions 2.1.x toutes versions | ||
| Fortinet | FortiWeb | FortiWeb versions 7.0.x antérieures à 7.0.11 | ||
| Fortinet | FortiPAM | FortiPAM versions antérieures à 1.4.3 | ||
| Fortinet | FortiSwitchManager | FortiSwitchManager versions 7.2.x antérieures à 7.2.4 | ||
| Fortinet | FortiWeb | FortiWeb versions 7.4.x antérieures à 7.4.9 | ||
| Fortinet | FortiManager | FortiManager Cloud versions antérieures à 7.2.10 | ||
| Fortinet | FortiSwitchManager | FortiSwitchManager versions 7.0.x antérieures à 7.0.4 | ||
| Fortinet | FortiMail | FortiMail versions 7.6.x antérieures à 7.6.2 | ||
| Fortinet | FortiProxy | FortiProxy versions 7.6.x antérieures à 7.6.3 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.3.x antérieures à 7.3.2 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.2.x antérieures à 7.2.6 | ||
| Fortinet | FortiSIEM | FortiSIEM versions antérieures à 6.7.10 | ||
| Fortinet | FortiADC | FortiADC versions 7.2.x antérieures à 7.2.1 | ||
| Fortinet | FortiSIEM | FortiSIEM versions 7.0.x antérieures à 7.0.4 | ||
| Fortinet | FortiCamera | FortiCamera versions antérieures à 2.0.1 | ||
| Fortinet | FortiManager | FortiManager Cloud versions 7.4.x antérieures à 7.4.6 | ||
| Fortinet | FortiProxy | FortiProxy versions antérieures à 7.4.4 | ||
| Fortinet | FortiVoice | FortiVoice versions antérieures à 6.4.10 | ||
| Fortinet | FortiADC | FortiADC versions antérieures à 7.1.2 | ||
| Fortinet | FortiRecorder | FortiRecorder versions 7.2.x antérieures à 7.2.2 | ||
| Fortinet | FortiSOAR | FortiSOAR versions 7.6.x antérieures à 7.6.2 |
References
| Title | Publication Time | Tags | ||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
|
||||||||||||||||||||||||||||||||||||||||||||
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "FortiOS versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiRecorder versions ant\u00e9rieures \u00e0 7.0.5",
"product": {
"name": "FortiRecorder",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiMail versions ant\u00e9rieures \u00e0 7.4.4",
"product": {
"name": "FortiMail",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.1.x ant\u00e9rieures \u00e0 7.1.8",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions ant\u00e9rieures \u00e0 7.0.14",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiNDR versions ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiNDR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiNDR versions 7.6.x ant\u00e9rieures \u00e0 7.6.1",
"product": {
"name": "FortiNDR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.4.x ant\u00e9rieures \u00e0 7.4.7",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.6.x ant\u00e9rieures \u00e0 7.6.4",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager versions 7.2.x ant\u00e9rieures \u00e0 7.2.10",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.2.x ant\u00e9rieures \u00e0 7.2.11",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiVoice versions 7.0.x ant\u00e9rieures \u00e0 7.0.5",
"product": {
"name": "FortiVoice",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSOAR versions ant\u00e9rieures \u00e0 7.5.2",
"product": {
"name": "FortiSOAR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiOS versions ant\u00e9rieures \u00e0 7.4.8",
"product": {
"name": "FortiOS",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions 1.5.x ant\u00e9rieures \u00e0 1.5.1",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiCamera versions 2.1.x toutes versions",
"product": {
"name": "FortiCamera",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.0.x ant\u00e9rieures \u00e0 7.0.11",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiPAM versions ant\u00e9rieures \u00e0 1.4.3",
"product": {
"name": "FortiPAM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSwitchManager versions 7.2.x ant\u00e9rieures \u00e0 7.2.4",
"product": {
"name": "FortiSwitchManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiWeb versions 7.4.x ant\u00e9rieures \u00e0 7.4.9",
"product": {
"name": "FortiWeb",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager Cloud versions ant\u00e9rieures \u00e0 7.2.10",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSwitchManager versions 7.0.x ant\u00e9rieures \u00e0 7.0.4",
"product": {
"name": "FortiSwitchManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiMail versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiMail",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions 7.6.x ant\u00e9rieures \u00e0 7.6.3",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.3.x ant\u00e9rieures \u00e0 7.3.2",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.2.x ant\u00e9rieures \u00e0 7.2.6",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions ant\u00e9rieures \u00e0 6.7.10",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions 7.2.x ant\u00e9rieures \u00e0 7.2.1",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSIEM versions 7.0.x ant\u00e9rieures \u00e0 7.0.4",
"product": {
"name": "FortiSIEM",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiCamera versions ant\u00e9rieures \u00e0 2.0.1",
"product": {
"name": "FortiCamera",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiManager Cloud versions 7.4.x ant\u00e9rieures \u00e0 7.4.6",
"product": {
"name": "FortiManager",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiProxy versions ant\u00e9rieures \u00e0 7.4.4",
"product": {
"name": "FortiProxy",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiVoice versions ant\u00e9rieures \u00e0 6.4.10",
"product": {
"name": "FortiVoice",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiADC versions ant\u00e9rieures \u00e0 7.1.2",
"product": {
"name": "FortiADC",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiRecorder versions 7.2.x ant\u00e9rieures \u00e0 7.2.2",
"product": {
"name": "FortiRecorder",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
},
{
"description": "FortiSOAR versions 7.6.x ant\u00e9rieures \u00e0 7.6.2",
"product": {
"name": "FortiSOAR",
"vendor": {
"name": "Fortinet",
"scada": false
}
}
}
],
"affected_systems_content": "",
"content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
"cves": [
{
"name": "CVE-2025-25248",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25248"
},
{
"name": "CVE-2025-47857",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-47857"
},
{
"name": "CVE-2025-32766",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32766"
},
{
"name": "CVE-2024-48892",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-48892"
},
{
"name": "CVE-2025-53744",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-53744"
},
{
"name": "CVE-2024-52964",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-52964"
},
{
"name": "CVE-2025-49813",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-49813"
},
{
"name": "CVE-2025-25256",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-25256"
},
{
"name": "CVE-2025-52970",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-52970"
},
{
"name": "CVE-2025-27759",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-27759"
},
{
"name": "CVE-2025-32932",
"url": "https://www.cve.org/CVERecord?id=CVE-2025-32932"
},
{
"name": "CVE-2024-26009",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-26009"
},
{
"name": "CVE-2024-40588",
"url": "https://www.cve.org/CVERecord?id=CVE-2024-40588"
},
{
"name": "CVE-2023-45584",
"url": "https://www.cve.org/CVERecord?id=CVE-2023-45584"
}
],
"links": [],
"reference": "CERTFR-2025-AVI-0679",
"revisions": [
{
"description": "Version initiale",
"revision_date": "2025-08-13T00:00:00.000000"
}
],
"risks": [
{
"description": "D\u00e9ni de service \u00e0 distance"
},
{
"description": "Injection de code indirecte \u00e0 distance (XSS)"
},
{
"description": "Atteinte \u00e0 l\u0027int\u00e9grit\u00e9 des donn\u00e9es"
},
{
"description": "Ex\u00e9cution de code arbitraire"
},
{
"description": "Contournement de la politique de s\u00e9curit\u00e9"
},
{
"description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
},
{
"description": "\u00c9l\u00e9vation de privil\u00e8ges"
}
],
"summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans les produits Fortinet. Certaines d\u0027entre elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire, une \u00e9l\u00e9vation de privil\u00e8ges et un d\u00e9ni de service \u00e0 distance.\n\nFortinet indique avoir connaissance de code d\u0027exploitation public pour la vuln\u00e9rabilit\u00e9 CVE-2025-25256.",
"title": "Multiples vuln\u00e9rabilit\u00e9s dans les produits Fortinet",
"vendor_advisories": [
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-501",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-501"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-421",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-421"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-173",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-173"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-152",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-152"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-042",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-042"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-150",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-150"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-383",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-383"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-364",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-364"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-253",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-253"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-309",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-309"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-513",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-513"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-25-448",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-448"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-24-473",
"url": "https://www.fortiguard.com/psirt/FG-IR-24-473"
},
{
"published_at": "2025-08-12",
"title": "Bulletin de s\u00e9curit\u00e9 Fortinet FG-IR-23-209",
"url": "https://www.fortiguard.com/psirt/FG-IR-23-209"
}
]
}
FKIE_CVE-2025-52970
Vulnerability from fkie_nvd - Published: 2025-08-12 19:15 - Updated: 2026-06-17 09:37
Severity
Summary
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.
References
| URL | Tags | ||
|---|---|---|---|
| psirt@fortinet.com | https://fortiguard.fortinet.com/psirt/FG-IR-25-448 | Vendor Advisory | |
| 134c704f-9b21-4f2e-91b3-4a467353bcc0 | https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970 | Exploit, Third Party Advisory |
{
"affected": [
{
"affectedData": [
{
"cpes": [
"cpe:2.3:a:fortinet:fortiweb:7.6.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.6.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.4.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.10:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.10:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.9:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.8:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.7:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.6:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.5:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:a:fortinet:fortiweb:7.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "FortiWeb",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.6.3",
"status": "affected",
"version": "7.6.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.4.7",
"status": "affected",
"version": "7.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.2.10",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.10",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
}
]
}
],
"source": "psirt@fortinet.com"
}
],
"configurations": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "7E739890-CFEA-4B7B-B78D-8CC8157BDF54",
"versionEndExcluding": "7.0.11",
"versionStartIncluding": "7.0.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "B642678E-4E31-4A6B-A791-ACD5D332B175",
"versionEndExcluding": "7.2.11",
"versionStartIncluding": "7.2.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "CA8DE17C-1756-4B18-A956-A52CFA0967B9",
"versionEndExcluding": "7.4.8",
"versionStartIncluding": "7.4.0",
"vulnerable": true
},
{
"criteria": "cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*",
"matchCriteriaId": "2B739434-1979-43F9-AEC1-D287B1BCA5CA",
"versionEndExcluding": "7.6.4",
"versionStartIncluding": "7.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
],
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request."
},
{
"lang": "es",
"value": "Un manejo inadecuado de los par\u00e1metros en Fortinet FortiWeb versiones 7.6.3 y anteriores, versiones 7.4.7 y anteriores, versiones 7.2.10 y anteriores, y 7.0.10 y anteriores puede permitir que un atacante remoto no autenticado con informaci\u00f3n no p\u00fablica perteneciente al dispositivo y al usuario objetivo obtenga privilegios de administrador en el dispositivo a trav\u00e9s de una solicitud especialmente manipulada."
}
],
"id": "CVE-2025-52970",
"lastModified": "2026-06-17T09:37:21.333",
"metrics": {
"cvssMetricV31": [
{
"cvssData": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"exploitabilityScore": 2.2,
"impactScore": 5.9,
"source": "psirt@fortinet.com",
"type": "Secondary"
}
],
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2025-52970",
"options": [
{
"exploitation": "poc"
},
{
"automatable": "no"
},
{
"technicalImpact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-08-18T12:41:47.892664Z",
"version": "2.0.3"
}
}
]
},
"published": "2025-08-12T19:15:32.277",
"references": [
{
"source": "psirt@fortinet.com",
"tags": [
"Vendor Advisory"
],
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448"
},
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"tags": [
"Exploit",
"Third Party Advisory"
],
"url": "https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970"
}
],
"sourceIdentifier": "psirt@fortinet.com",
"vulnStatus": "Analyzed",
"weaknesses": [
{
"description": [
{
"lang": "en",
"value": "CWE-233"
}
],
"source": "psirt@fortinet.com",
"type": "Secondary"
}
]
}
GHSA-JC24-HJQ6-4G6F
Vulnerability from github – Published: 2025-08-12 21:31 – Updated: 2025-08-14 21:31
VLAI
Details
A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.
Severity
8.1 (High)
{
"affected": [],
"aliases": [
"CVE-2025-52970"
],
"database_specific": {
"cwe_ids": [
"CWE-233"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-08-12T19:15:32Z",
"severity": "HIGH"
},
"details": "A improper handling of parameters in Fortinet FortiWeb versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below may allow an unauthenticated remote attacker with non-public information pertaining to the device and targeted user to gain admin privileges on the device via a specially crafted request.",
"id": "GHSA-jc24-hjq6-4g6f",
"modified": "2025-08-14T21:31:57Z",
"published": "2025-08-12T21:31:21Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2025-52970"
},
{
"type": "WEB",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448"
},
{
"type": "WEB",
"url": "https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"type": "CVSS_V3"
}
]
}
NCSC-2025-0255
Vulnerability from csaf_ncscnl - Published: 2025-08-13 09:16 - Updated: 2025-08-13 09:35Summary
Kwetsbaarheden verholpen in Fortinet producten
Notes
The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:
NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.
NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.
This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings.
Feiten: Fortinet heeft kwetsbaarheden verholpen in FortiOS, FortiProxy, FortiPAM, FortiSIEM, FortiWeb en FortiADC.
Interpretaties: De meest ernstige kwetsbaarheid stelt een niet-geauthenticeerde aanvaller in staat om op afstand willekeurige code uit te voeren op FortiSIEM middels aangepaste CLI commando's. Forti geeft aan dat voor deze kwetsbaarheid PoC code beschikbaar is.
Daarnaast is er een kwetsbaarheid op FortiOS, FortiProxy en FortiPAM die een niet-geauthenticeerde aanvaller in staat stelt om de controle over een beheerd apparaat over te nemen via speciaal vervaardigde FGFM-verzoeken, als het apparaat wordt beheerd door een FortiManager en de aanvaller het serienummer van die FortiManager kent.
Oplossingen: Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.
Kans: medium
Schade: high
CWE-266: Incorrect Privilege Assignment
CWE-190: Integer Overflow or Wraparound
CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CWE-121: Stack-based Buffer Overflow
CWE-233: Improper Handling of Parameters
5.3 (Medium)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
9.8 (Critical)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
6.4 (Medium)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
6.7 (Medium)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
7.2 (High)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
8.1 (High)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
7.2 (High)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
8.1 (High)
Affected products
Known affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
vers:fortinet/6.2.0
Fortinet / FortiADC
|
vers:fortinet/6.2.0 | ||
|
vers:fortinet/6.2.1
Fortinet / FortiADC
|
vers:fortinet/6.2.1 | ||
|
vers:fortinet/6.2.2
Fortinet / FortiADC
|
vers:fortinet/6.2.2 | ||
|
vers:fortinet/6.2.3
Fortinet / FortiADC
|
vers:fortinet/6.2.3 | ||
|
vers:fortinet/6.2.4
Fortinet / FortiADC
|
vers:fortinet/6.2.4 | ||
|
vers:fortinet/6.2.5
Fortinet / FortiADC
|
vers:fortinet/6.2.5 | ||
|
vers:fortinet/6.2.6
Fortinet / FortiADC
|
vers:fortinet/6.2.6 | ||
|
vers:fortinet/7.1.0
Fortinet / FortiADC
|
vers:fortinet/7.1.0 | ||
|
vers:fortinet/7.1.1
Fortinet / FortiADC
|
vers:fortinet/7.1.1 | ||
|
vers:fortinet/7.2.0
Fortinet / FortiADC
|
vers:fortinet/7.2.0 | ||
|
vers:semver/6.2.0|<=6.2.6
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*
|
vers:semver/6.2.0|<=6.2.6 | |
|
vers:semver/7.1.0|<=7.1.1
Fortinet / FortiADC
|
cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*
|
vers:semver/7.1.0|<=7.1.1 | |
|
vers:unknown/7.2.0
Fortinet / FortiADC
|
cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*
|
vers:unknown/7.2.0 | |
|
vers:fortinet/6.4.0
Fortinet / FortiOS
|
vers:fortinet/6.4.0 | ||
|
vers:fortinet/6.4.1
Fortinet / FortiOS
|
vers:fortinet/6.4.1 | ||
|
vers:fortinet/6.4.10
Fortinet / FortiOS
|
vers:fortinet/6.4.10 | ||
|
vers:fortinet/6.4.11
Fortinet / FortiOS
|
vers:fortinet/6.4.11 | ||
|
vers:fortinet/6.4.12
Fortinet / FortiOS
|
vers:fortinet/6.4.12 | ||
|
vers:fortinet/6.4.13
Fortinet / FortiOS
|
vers:fortinet/6.4.13 | ||
|
vers:fortinet/6.4.14
Fortinet / FortiOS
|
vers:fortinet/6.4.14 | ||
|
vers:fortinet/6.4.15
Fortinet / FortiOS
|
vers:fortinet/6.4.15 | ||
|
vers:fortinet/6.4.16
Fortinet / FortiOS
|
vers:fortinet/6.4.16 | ||
|
vers:fortinet/6.4.2
Fortinet / FortiOS
|
vers:fortinet/6.4.2 | ||
|
vers:fortinet/6.4.3
Fortinet / FortiOS
|
vers:fortinet/6.4.3 | ||
|
vers:fortinet/6.4.4
Fortinet / FortiOS
|
vers:fortinet/6.4.4 |
References
15 references
| URL | Category |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-364 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-152 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-173 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-253 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-383 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-448 | external |
| https://fortiguard.fortinet.com/psirt/FG-IR-25-501 | external |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-… | self |
| https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-… | self |
{
"document": {
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE"
}
},
"lang": "nl",
"notes": [
{
"category": "legal_disclaimer",
"text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this page to enhance access to its information and security advisories. The use of this security advisory is subject to the following terms and conditions:\n\n NCSC-NL makes every reasonable effort to ensure that the content of this page is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or continuous keeping up-to-date. The information contained in this security advisory is intended solely for the purpose of providing general information to professional users. No rights can be derived from the information provided therein.\n\n NCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of this security advisory. This includes damage resulting from the inaccuracy of incompleteness of the information contained in the advisory.\n This security advisory is subject to Dutch law. All disputes related to or arising from the use of this advisory will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings."
},
{
"category": "description",
"text": "Fortinet heeft kwetsbaarheden verholpen in FortiOS, FortiProxy, FortiPAM, FortiSIEM, FortiWeb en FortiADC.",
"title": "Feiten"
},
{
"category": "description",
"text": "De meest ernstige kwetsbaarheid stelt een niet-geauthenticeerde aanvaller in staat om op afstand willekeurige code uit te voeren op FortiSIEM middels aangepaste CLI commando\u0027s. Forti geeft aan dat voor deze kwetsbaarheid PoC code beschikbaar is.\n\nDaarnaast is er een kwetsbaarheid op FortiOS, FortiProxy en FortiPAM die een niet-geauthenticeerde aanvaller in staat stelt om de controle over een beheerd apparaat over te nemen via speciaal vervaardigde FGFM-verzoeken, als het apparaat wordt beheerd door een FortiManager en de aanvaller het serienummer van die FortiManager kent.",
"title": "Interpretaties"
},
{
"category": "description",
"text": "Fortinet heeft updates uitgebracht om de kwetsbaarheden te verhelpen. Zie bijgevoegde referenties voor meer informatie.",
"title": "Oplossingen"
},
{
"category": "general",
"text": "medium",
"title": "Kans"
},
{
"category": "general",
"text": "high",
"title": "Schade"
},
{
"category": "general",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
},
{
"category": "general",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
},
{
"category": "general",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
},
{
"category": "general",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
},
{
"category": "general",
"text": "Improper Handling of Parameters",
"title": "CWE-233"
}
],
"publisher": {
"category": "coordinator",
"contact_details": "cert@ncsc.nl",
"name": "Nationaal Cyber Security Centrum",
"namespace": "https://www.ncsc.nl/"
},
"references": [
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-364"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-152"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-173"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-253"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-383"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-448"
},
{
"category": "external",
"summary": "Reference",
"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-501"
}
],
"title": "Kwetsbaarheden verholpen in Fortinet producten",
"tracking": {
"current_release_date": "2025-08-13T09:35:40.587034Z",
"generator": {
"date": "2025-08-04T16:30:00Z",
"engine": {
"name": "V.A.",
"version": "1.2"
}
},
"id": "NCSC-2025-0255",
"initial_release_date": "2025-08-13T09:16:29.067287Z",
"revision_history": [
{
"date": "2025-08-13T09:16:29.067287Z",
"number": "1.0.0",
"summary": "Initiele versie"
},
{
"date": "2025-08-13T09:35:40.587034Z",
"number": "1.0.1",
"summary": "CVE-2024-26009 toegevoegd"
}
],
"status": "final",
"version": "1.0.1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.0",
"product": {
"name": "vers:fortinet/6.2.0",
"product_id": "CSAFPID-2425316"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.1",
"product": {
"name": "vers:fortinet/6.2.1",
"product_id": "CSAFPID-2425315"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.2",
"product": {
"name": "vers:fortinet/6.2.2",
"product_id": "CSAFPID-2425314"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.3",
"product": {
"name": "vers:fortinet/6.2.3",
"product_id": "CSAFPID-2425313"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.4",
"product": {
"name": "vers:fortinet/6.2.4",
"product_id": "CSAFPID-2425312"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.5",
"product": {
"name": "vers:fortinet/6.2.5",
"product_id": "CSAFPID-2425311"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.2.6",
"product": {
"name": "vers:fortinet/6.2.6",
"product_id": "CSAFPID-2425310"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/7.1.0",
"product": {
"name": "vers:fortinet/7.1.0",
"product_id": "CSAFPID-2425303"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/7.1.1",
"product": {
"name": "vers:fortinet/7.1.1",
"product_id": "CSAFPID-2425302"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/7.2.0",
"product": {
"name": "vers:fortinet/7.2.0",
"product_id": "CSAFPID-2425298"
}
},
{
"category": "product_version_range",
"name": "vers:semver/6.2.0|\u003c=6.2.6",
"product": {
"name": "vers:semver/6.2.0|\u003c=6.2.6",
"product_id": "CSAFPID-2460905",
"product_identification_helper": {
"cpe": "cpe:2.3:h:fortinet:fortiadc:5.3.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:semver/7.1.0|\u003c=7.1.1",
"product": {
"name": "vers:semver/7.1.0|\u003c=7.1.1",
"product_id": "CSAFPID-3049135",
"product_identification_helper": {
"cpe": "cpe:2.3:h:fortinet:fortiadc:6.2.0:*:*:*:*:*:*:*"
}
}
},
{
"category": "product_version_range",
"name": "vers:unknown/7.2.0",
"product": {
"name": "vers:unknown/7.2.0",
"product_id": "CSAFPID-58273",
"product_identification_helper": {
"cpe": "cpe:2.3:a:fortinet:fortiadc:7.2.0:*:*:*:*:*:*:*"
}
}
}
],
"category": "product_name",
"name": "FortiADC"
},
{
"branches": [
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.0",
"product": {
"name": "vers:fortinet/6.4.0",
"product_id": "CSAFPID-1770908"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.1",
"product": {
"name": "vers:fortinet/6.4.1",
"product_id": "CSAFPID-1770907"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.10",
"product": {
"name": "vers:fortinet/6.4.10",
"product_id": "CSAFPID-1770898"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.11",
"product": {
"name": "vers:fortinet/6.4.11",
"product_id": "CSAFPID-1770897"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.12",
"product": {
"name": "vers:fortinet/6.4.12",
"product_id": "CSAFPID-1770896"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.13",
"product": {
"name": "vers:fortinet/6.4.13",
"product_id": "CSAFPID-1770895"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.14",
"product": {
"name": "vers:fortinet/6.4.14",
"product_id": "CSAFPID-1770894"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.15",
"product": {
"name": "vers:fortinet/6.4.15",
"product_id": "CSAFPID-1770893"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.16",
"product": {
"name": "vers:fortinet/6.4.16",
"product_id": "CSAFPID-2575147"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.2",
"product": {
"name": "vers:fortinet/6.4.2",
"product_id": "CSAFPID-1770906"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.3",
"product": {
"name": "vers:fortinet/6.4.3",
"product_id": "CSAFPID-1770905"
}
},
{
"category": "product_version_range",
"name": "vers:fortinet/6.4.4",
"product": {
"name": "vers:fortinet/6.4.4",
"product_id": "CSAFPID-1770904"
}
}
],
"category": "product_name",
"name": "FortiOS"
}
],
"category": "vendor",
"name": "Fortinet"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-25248",
"cwe": {
"id": "CWE-190",
"name": "Integer Overflow or Wraparound"
},
"notes": [
{
"category": "other",
"text": "Integer Overflow or Wraparound",
"title": "CWE-190"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25248 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-25248.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-25248"
},
{
"cve": "CVE-2025-25256",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-25256 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-25256.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-25256"
},
{
"cve": "CVE-2025-32766",
"cwe": {
"id": "CWE-121",
"name": "Stack-based Buffer Overflow"
},
"notes": [
{
"category": "other",
"text": "Stack-based Buffer Overflow",
"title": "CWE-121"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-32766 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-32766.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.4,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-32766"
},
{
"cve": "CVE-2025-47857",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-47857 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-47857.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.7,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-47857"
},
{
"cve": "CVE-2025-49813",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"notes": [
{
"category": "other",
"text": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"title": "CWE-78"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-49813 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-49813.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-49813"
},
{
"cve": "CVE-2025-52970",
"cwe": {
"id": "CWE-233",
"name": "Improper Handling of Parameters"
},
"notes": [
{
"category": "other",
"text": "Improper Handling of Parameters",
"title": "CWE-233"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-52970 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-52970.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-52970"
},
{
"cve": "CVE-2025-53744",
"cwe": {
"id": "CWE-266",
"name": "Incorrect Privilege Assignment"
},
"notes": [
{
"category": "other",
"text": "Incorrect Privilege Assignment",
"title": "CWE-266"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2025-53744 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2025/cve-2025-53744.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.2,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2025-53744"
},
{
"cve": "CVE-2024-26009",
"cwe": {
"id": "CWE-288",
"name": "Authentication Bypass Using an Alternate Path or Channel"
},
"notes": [
{
"category": "other",
"text": "Authentication Bypass Using an Alternate Path or Channel",
"title": "CWE-288"
}
],
"product_status": {
"known_affected": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
},
"references": [
{
"category": "self",
"summary": "CVE-2024-26009 | NCSC-NL Website",
"url": "https://vulnerabilities.ncsc.nl/csaf/v2/2024/cve-2024-26009.json"
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 8.1,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"CSAFPID-2425316",
"CSAFPID-2425315",
"CSAFPID-2425314",
"CSAFPID-2425313",
"CSAFPID-2425312",
"CSAFPID-2425311",
"CSAFPID-2425310",
"CSAFPID-2425303",
"CSAFPID-2425302",
"CSAFPID-2425298",
"CSAFPID-2460905",
"CSAFPID-3049135",
"CSAFPID-58273",
"CSAFPID-1770908",
"CSAFPID-1770907",
"CSAFPID-1770898",
"CSAFPID-1770897",
"CSAFPID-1770896",
"CSAFPID-1770895",
"CSAFPID-1770894",
"CSAFPID-1770893",
"CSAFPID-2575147",
"CSAFPID-1770906",
"CSAFPID-1770905",
"CSAFPID-1770904"
]
}
],
"title": "CVE-2024-26009"
}
]
}
WID-SEC-W-2025-1805
Vulnerability from csaf_certbund - Published: 2025-08-12 22:00 - Updated: 2025-08-17 22:00Summary
Fortinet FortiWeb: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: FortiWeb ist eine Web Application Firewall von Fortinet.
Angriff: Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um beliebigen Code auszuführen und Sicherheitsmaßnahmen zu umgehen.
Betroffene Betriebssysteme: - Appliance
- Sonstiges
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Fortinet FortiWeb <7.4.8
Fortinet / FortiWeb
|
<7.4.8 | ||
|
Fortinet FortiWeb <7.2.11
Fortinet / FortiWeb
|
<7.2.11 | ||
|
Fortinet FortiWeb <7.6.4
Fortinet / FortiWeb
|
<7.6.4 | ||
|
Fortinet FortiWeb <7.0.11
Fortinet / FortiWeb
|
<7.0.11 |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Fortinet FortiWeb <7.4.8
Fortinet / FortiWeb
|
<7.4.8 | ||
|
Fortinet FortiWeb <7.6.4
Fortinet / FortiWeb
|
<7.6.4 | ||
|
Fortinet FortiWeb <7.4.9
Fortinet / FortiWeb
|
<7.4.9 |
Affected products
Known affected
3 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Fortinet FortiWeb <7.4.8
Fortinet / FortiWeb
|
<7.4.8 | ||
|
Fortinet FortiWeb <7.6.4
Fortinet / FortiWeb
|
<7.6.4 | ||
|
Fortinet FortiWeb <7.4.9
Fortinet / FortiWeb
|
<7.4.9 |
Affected products
Known affected
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Fortinet FortiWeb <7.4.8
Fortinet / FortiWeb
|
<7.4.8 | ||
|
Fortinet FortiWeb <7.2.11
Fortinet / FortiWeb
|
<7.2.11 | ||
|
Fortinet FortiWeb <7.6.4
Fortinet / FortiWeb
|
<7.6.4 | ||
|
Fortinet FortiWeb <7.0.11
Fortinet / FortiWeb
|
<7.0.11 |
References
7 references
| URL | Category |
|---|---|
| https://wid.cert-bund.de/.well-known/csaf/white/2… | self |
| https://wid.cert-bund.de/portal/wid/securityadvis… | self |
| https://www.fortiguard.com/psirt/FG-IR-25-150 | external |
| https://www.fortiguard.com/psirt/FG-IR-25-253 | external |
| https://www.fortiguard.com/psirt/FG-IR-25-383 | external |
| https://www.fortiguard.com/psirt/FG-IR-25-448 | external |
| https://pwner.gg/blog/2025-08-13-fortiweb-cve-202… | external |
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "FortiWeb ist eine Web Application Firewall von Fortinet.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein lokaler oder entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiWeb ausnutzen, um beliebigen Code auszuf\u00fchren und Sicherheitsma\u00dfnahmen zu umgehen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Appliance\n- Sonstiges",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2025-1805 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-1805.json"
},
{
"category": "self",
"summary": "WID-SEC-2025-1805 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-1805"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-25-150 vom 2025-08-12",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-150"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-25-253 vom 2025-08-12",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-253"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-25-383 vom 2025-08-12",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-383"
},
{
"category": "external",
"summary": "FortiGuard PSIRT Advisory FG-IR-25-448 vom 2025-08-12",
"url": "https://www.fortiguard.com/psirt/FG-IR-25-448"
},
{
"category": "external",
"summary": "PoC CVE-2025-52970 vom 2025-08-17",
"url": "https://pwner.gg/blog/2025-08-13-fortiweb-cve-2025-52970"
}
],
"source_lang": "en-US",
"title": "Fortinet FortiWeb: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2025-08-17T22:00:00.000+00:00",
"generator": {
"date": "2025-08-18T09:55:24.992+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.4.0"
}
},
"id": "WID-SEC-W-2025-1805",
"initial_release_date": "2025-08-12T22:00:00.000+00:00",
"revision_history": [
{
"date": "2025-08-12T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2025-08-17T22:00:00.000+00:00",
"number": "2",
"summary": "PoC f\u00fcr CVE-2025-52970 aufgenommen"
}
],
"status": "final",
"version": "2"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c7.6.4",
"product": {
"name": "Fortinet FortiWeb \u003c7.6.4",
"product_id": "T046164"
}
},
{
"category": "product_version",
"name": "7.6.4",
"product": {
"name": "Fortinet FortiWeb 7.6.4",
"product_id": "T046164-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortiweb:7.6.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.4.8",
"product": {
"name": "Fortinet FortiWeb \u003c7.4.8",
"product_id": "T046165"
}
},
{
"category": "product_version",
"name": "7.4.8",
"product": {
"name": "Fortinet FortiWeb 7.4.8",
"product_id": "T046165-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortiweb:7.4.8"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.2.11",
"product": {
"name": "Fortinet FortiWeb \u003c7.2.11",
"product_id": "T046166"
}
},
{
"category": "product_version",
"name": "7.2.11",
"product": {
"name": "Fortinet FortiWeb 7.2.11",
"product_id": "T046166-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortiweb:7.2.11"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.0.11",
"product": {
"name": "Fortinet FortiWeb \u003c7.0.11",
"product_id": "T046167"
}
},
{
"category": "product_version",
"name": "7.0.11",
"product": {
"name": "Fortinet FortiWeb 7.0.11",
"product_id": "T046167-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortiweb:7.0.11"
}
}
},
{
"category": "product_version_range",
"name": "\u003c7.4.9",
"product": {
"name": "Fortinet FortiWeb \u003c7.4.9",
"product_id": "T046168"
}
},
{
"category": "product_version",
"name": "7.4.9",
"product": {
"name": "Fortinet FortiWeb 7.4.9",
"product_id": "T046168-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:fortinet:fortiweb:7.4.9"
}
}
}
],
"category": "product_name",
"name": "FortiWeb"
}
],
"category": "vendor",
"name": "Fortinet"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2025-27759",
"product_status": {
"known_affected": [
"T046165",
"T046166",
"T046164",
"T046167"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-27759"
},
{
"cve": "CVE-2025-32766",
"product_status": {
"known_affected": [
"T046165",
"T046164",
"T046168"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-32766"
},
{
"cve": "CVE-2025-47857",
"product_status": {
"known_affected": [
"T046165",
"T046164",
"T046168"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-47857"
},
{
"cve": "CVE-2025-52970",
"product_status": {
"known_affected": [
"T046165",
"T046166",
"T046164",
"T046167"
]
},
"release_date": "2025-08-12T22:00:00.000+00:00",
"title": "CVE-2025-52970"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…