by Kastro
Paper/Archive/CVE-2025-25249

CVE-2025-25249

Fortinet FortiSwitchManager — Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

KEV · due 12 SepEPSS 4%public exploitSSVC actCVSS 9.8
critical.is priorityof 100
97
CVSS 9.8 (NVD)9.8 / 10 × 3029.4In CISA KEV+3030.0EPSS percentile 89.8.898 × 2018.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Affected

ProductAffectedFixed inSource
FortiSwitchManager7.2.2 – 7.2.5–CNA
FortiOS7.6.0 – 7.6.2–CNA
FortiOS7.4.0 – 7.4.7–CNA
FortiOS7.2.4 – 7.2.11–CNA
RUGGEDCOM APE1808all versions–siemens-SADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
fortinet (CNA)7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-084writeupsocradar.io/blog/cve-2025-25249-pivotc2-fortigate-ratrefcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249refcert-portal.siemens.com/productcert/html/ssa-864900.htmlkevcisa.gov/known-exploited-vulnerabilities-catalog