Skip to content
fr Sign in
9.3 Critical

CVE-2025-47855 An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0…

Description

An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through 3.0.23 allows an unauthenticated attacker to obtain the device configuration via crafted HTTP or HTTPS requests.

Affected products and versions

Product Affected versions Fixed in
FortiFone 7.0 7.0.0 → 7.0.1 No fix stated
FortiFone 3.0 3.0.13 → 3.0.23 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiFone

The 2 CVEs of FortiFone →
CVE-2021-36193 Multiple stack-based buffer overflows in the command line interpreter of FortiWeb before 6.4.2 may allow an… 6.3 Medium
Track this CVE