VYPR
← All advisories
Low severity3.1NVD Advisory· Published Jun 10, 2025· Updated Jun 17, 2026

CVE-2025-22251

CVE-2025-22251

Description

An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization packets.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/Fortios3 versions
    cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*range: >=6.4.0,<7.4.6
    • cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*
    • (no CPE)range: 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.