VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 24, 2025· Updated Mar 24, 2025

CVE-2023-25610

CVE-2023-25610

Description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected products

9
  • Fortinet/Fortianalyzerv5
    cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*
    Range: 7.2.0
  • Fortinet/Fortimanagerv5
    cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*
    Range: 7.2.0
  • Fortinet/Fortiosv53 versions
    cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*range: 7.2.0
    • (no CPE)range: 7.2.0-7.2.3, 7.0.0-7.0.6, 6.4.0-6.4.11, <=6.2.12
    • (no CPE)range: 7.0.5
  • Fortinet/Fortiproxyllm-fuzzy2 versions
    7.2.0-7.2.2, 7.0.0-7.0.8, <=2.0.12+ 1 more
    • (no CPE)range: 7.2.0-7.2.2, 7.0.0-7.0.8, <=2.0.12
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiwebv5
    Range: 7.2.0
  • Fortinet/Fortiswitchmanagerv5
    Range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.