9.3
Critical
CVE-2023-25610 A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0…
Description
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiSwitchManager 7.2 | 7.2.0 → 7.2.1 | No fix stated |
| FortiSwitchManager 7.0 | 7.0.0 → 7.0.1 | No fix stated |
| FortiAnalyzer | 7.2.0 | No fix stated |
| FortiAnalyzer 7.0 | 7.0.0 → 7.0.4 | No fix stated |
| FortiAnalyzer 6.4 | 6.4.0 → 6.4.11 | No fix stated |
| FortiAnalyzer 6.2 | 6.2.0 → 6.2.10 | No fix stated |
| FortiAnalyzer 6.0 | 6.0.0 → 6.0.11 | No fix stated |
| FortiOS-6K7K | 7.0.5 | No fix stated |
| FortiOS-6K7K 6.4 | 6.4.2 → 6.4.10 | No fix stated |
Show the 27 other branches Hide the 27 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiOS-6K7K 6.2 | 6.2.4 → 6.2.12 | No fix stated |
| FortiOS-6K7K 6.0 | 6.0.10 → 6.0.18 | No fix stated |
| FortiProxy 7.2 | 7.2.0 → 7.2.2 | No fix stated |
| FortiProxy 7.0 | 7.0.0 → 7.0.8 | No fix stated |
| FortiProxy 2.0 | 2.0.0 → 2.0.14 | No fix stated |
| FortiProxy 1.2 | 1.2.0 → 1.2.13 | No fix stated |
| FortiProxy 1.1 | 1.1.0 → 1.1.6 | No fix stated |
| FortiOS 7.2 | 7.2.0 → 7.2.3 | No fix stated |
| FortiOS 7.0 | 7.0.0 → 7.0.9 | No fix stated |
| FortiOS 6.4 | 6.4.0 → 6.4.11 | No fix stated |
| FortiOS 6.2 | 6.2.0 → 6.2.12 | No fix stated |
| FortiOS 6.0 | 6.0.0 → 6.0.18 | No fix stated |
| FortiOS 5.6 | 5.6.0 → 5.6.14 | No fix stated |
| FortiOS 5.4 | 5.4.0 → 5.4.13 | No fix stated |
| FortiOS 5.2 | 5.2.0 → 5.2.15 | No fix stated |
| FortiOS 5.0 | 5.0.0 → 5.0.14 | No fix stated |
| FortiManager | 7.2.0 | No fix stated |
| FortiManager 7.0 | 7.0.0 → 7.0.4 | No fix stated |
| FortiManager 6.4 | 6.4.0 → 6.4.11 | No fix stated |
| FortiManager 6.2 | 6.2.0 → 6.2.10 | No fix stated |
| FortiManager 6.0 | 6.0.0 → 6.0.11 | No fix stated |
| FortiWeb 7.2 | 7.2.0 → 7.2.1 | No fix stated |
| FortiWeb 7.0 | 7.0.0 → 7.0.6 | No fix stated |
| FortiWeb 6.4 | 6.4.0 → 6.4.2 | No fix stated |
| FortiWeb 6.3 | 6.3.0 → 6.3.22 | No fix stated |
| FortiWeb 6.2 | 6.2.0 → 6.2.7 | No fix stated |
| FortiWeb 6.1 | 6.1.0 → 6.1.3 | No fix stated |
References
- fortiguard.com fortiguard.com
Timeline
- Published
- Last modified
Other CVEs of FortiSwitchManager
The 20 CVEs of FortiSwitchManager →
CVE-2026-59840
A buffer over-read vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all…
4.1
Medium
CVE-2025-61624
Fortinet Multiple Products Path Traversal Vulnerability
5.4
Medium
CVE-2025-25249
Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
7.4
High
CVE-2025-59718
Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability
9.1
Critical