VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Mar 24, 2025· Updated Jun 17, 2026

CVE-2023-25610

CVE-2023-25610

Description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected products

21
  • Fortinet/Fortianalyzer3 versions
    cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*range: >=6.0.0,<6.0.12
    • cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/Fortimanager3 versions
    cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*range: >=6.0.0,<6.0.12
    • cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*
    • cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/FortiOS-6K7K3 versions
    cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*range: >=6.0.4,<6.2.13
    • cpe:2.3:a:fortinet:fortios-6k7k:7.0.5:*:*:*:*:*:*:*
    • (no CPE)range: 7.0.5, 6.4.0 - 6.4.10, <=6.2.10
  • Fortinet/Fortiproxy3 versions
    cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*range: >=1.1.0,<7.0.9
    • (no CPE)range: 7.2.0 - 7.2.2, 7.0.0 - 7.0.8, <=2.0.12
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiswitchmanager2 versions
    cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*range: >=7.0.0,<7.0.2
    • (no CPE)range: 7.2.0
  • Fortinet/Fortiweb2 versions
    cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*range: >=6.1.0,<6.1.4
    • (no CPE)range: 7.2.0
  • Fortinet/Fortios4 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=5.0.0,<6.2.13
    • cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*range: 7.2.0
    • (no CPE)range: 7.2.0 - 7.2.3, 7.0.0 - 7.0.6, 6.4.0 - 6.4.11, <=6.2.12
    • (no CPE)range: 7.0.5
  • Fortinet/FortiSwitch GUI
    cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
    Range: >=7.0.0,<7.0.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.