by Kastro
Paper/Archive/CVE-2025-25256

CVE-2025-25256

Fortinet FortiSIEM — An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in For…

EPSS 65%public exploitCVSS 9.8
critical.is priorityof 100
59
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 99.3.993 × 2019.9Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.

Affected

ProductAffectedFixed inSource
FortiSIEM7.3.0 – 7.3.1–CNA
FortiSIEM7.2.0 – 7.2.5–CNA
FortiSIEM7.1.0 – 7.1.7–CNA
FortiSIEM7.0.0 – 7.0.3–CNA
FortiSIEM6.7.0 – 6.7.9–CNA
FortiSIEM6.6.0 – 6.6.5–CNA
FortiSIEM6.5.0 – 6.5.3–CNA
FortiSIEM6.4.0 – 6.4.4–CNA
FortiSIEM6.3.0 – 6.3.3–CNA
FortiSIEM6.2.0 – 6.2.1–CNA
FortiSIEM6.1.0 – 6.1.2–CNA
FortiSIEM5.4.0–CNA

Scores by source

fortinet (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

reffortiguard.fortinet.com/psirt/FG-IR-25-152exploitgithub.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256writeuplabs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256reftheregister.com/2025/08/13/fortinet_discloses_critical_bug