← Back to browse · API

CVE-2023-25610

Severity
CRITICAL
CVSS
9.3
EPSS
0.18334
Risk score
43.62
CISA KEV
No
PoC
No
Published
2025-03-24
Modified
2025-03-24
First seen
2026-08-07
Aliases
EUVD-2023-29551, GHSA-WVPR-V2QR-CCVF
Products
Fortinet:FortiAnalyzer 6.0.0 ≤6.0.11, Fortinet:FortiAnalyzer 6.2.0 ≤6.2.10, Fortinet:FortiAnalyzer 6.4.0 ≤6.4.11, Fortinet:FortiAnalyzer 7.0.0 ≤7.0.4, Fortinet:FortiAnalyzer 7.2.0, Fortinet:FortiManager 6.0.0 ≤6.0.11, Fortinet:FortiManager 6.2.0 ≤6.2.10, Fortinet:FortiManager 6.4.0 ≤6.4.11, Fortinet:FortiManager 7.0.0 ≤7.0.4, Fortinet:FortiManager 7.2.0, Fortinet:FortiOS 5.0.0 ≤5.0.14, Fortinet:FortiOS 5.2.0 ≤5.2.15, Fortinet:FortiOS 5.4.0 ≤5.4.13, Fortinet:FortiOS 5.6.0 ≤5.6.14, Fortinet:FortiOS 6.0.0 ≤6.0.18, Fortinet:FortiOS 6.2.0 ≤6.2.12, Fortinet:FortiOS 6.4.0 ≤6.4.11, Fortinet:FortiOS 7.0.0 ≤7.0.9, Fortinet:FortiOS 7.2.0 ≤7.2.3, Fortinet:FortiOS-6K7K 6.0.10, Fortinet:FortiOS-6K7K 6.0.12 ≤6.0.18, Fortinet:FortiOS-6K7K 6.2.4, Fortinet:FortiOS-6K7K 6.2.6 ≤6.2.7, Fortinet:FortiOS-6K7K 6.2.9 ≤6.2.12, Fortinet:FortiOS-6K7K 6.4.10, Fortinet:FortiOS-6K7K 6.4.2, Fortinet:FortiOS-6K7K 6.4.6, Fortinet:FortiOS-6K7K 6.4.8, Fortinet:FortiOS-6K7K 7.0.5, Fortinet:FortiProxy 1.1.0 ≤1.1.6, Fortinet:FortiProxy 1.2.0 ≤1.2.13, Fortinet:FortiProxy 2.0.0 ≤2.0.14, Fortinet:FortiProxy 7.0.0 ≤7.0.8, Fortinet:FortiProxy 7.2.0 ≤7.2.2, Fortinet:FortiSwitchManager 7.0.0 ≤7.0.1, Fortinet:FortiSwitchManager 7.2.0 ≤7.2.1, Fortinet:FortiWeb 6.1.0 ≤6.1.3, Fortinet:FortiWeb 6.2.0 ≤6.2.7, Fortinet:FortiWeb 6.3.0 ≤6.3.22, Fortinet:FortiWeb 6.4.0 ≤6.4.2, Fortinet:FortiWeb 7.0.0 ≤7.0.6, Fortinet:FortiWeb 7.2.0 ≤7.2.1
Sources
euvd EUVD-2023-29551

Description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

References