Skip to content
fr Sign in
5.7 Medium

CVE-2025-22258 A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0…

Description

A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.

CVSS 3.1 detail

Vector CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H/E:P/RL:W/RC:R

Exploitable remotely over the network, with an administrator account and without any user action; an attacker can seriously compromise confidentiality, integrity or availability.

Attack vector
Network
Attack complexity
Low
Privileges required
High
Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Affected products and versions

Product Affected versions Fixed in
FortiSRA 1.5.0 No fix stated
FortiSRA 1.4 1.4.0 → 1.4.2 No fix stated
FortiSwitchManager 7.2 7.2.1 → 7.2.5 No fix stated
FortiProxy 7.6 7.6.0 → 7.6.1 No fix stated
FortiProxy 7.4 7.4.0 → 7.4.7 No fix stated
FortiOS 7.6 7.6.0 → 7.6.2 No fix stated
FortiOS 7.4 7.4.0 → 7.4.6 No fix stated
FortiOS 7.2 7.2.0 → 7.2.10 No fix stated
FortiOS 7.0 7.0.2 → 7.0.16 No fix stated
Show the 6 other branches
Product Affected versions Fixed in
FortiPAM 1.5.0 No fix stated
FortiPAM 1.4 1.4.0 → 1.4.2 No fix stated
FortiPAM 1.3 1.3.0 → 1.3.1 No fix stated
FortiPAM 1.2.0 No fix stated
FortiPAM 1.1 1.1.0 → 1.1.2 No fix stated
FortiPAM 1.0 1.0.0 → 1.0.3 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiSRA

The 4 CVEs of FortiSRA →
CVE-2024-47570 An insertion of sensitive information into log file vulnerability [CWE-532] in FortiOS 7.4.0 through 7.4.3, 7.2.0… 6.3 Medium CVE-2025-22256 A improper handling of insufficient permissions or privileges in Fortinet FortiPAM 1.4.0 through 1.4.1, 1.3.0, 1.2.0,… 6.0 Medium CVE-2024-45324 A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version… 7.0 High
Track this CVE