Medium WID-SEC-2025-1283 4 CVEs

Fortinet FortiOS: Mehrere Schwachstellen

Published Jun 10, 2025 · Updated Jun 10, 2025 · de-DE

Vendor: Fortinet Product: FortiOS

Summary

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.

Product

FortiOS ist ein gehärtetes Betriebssystem für FortiGate Plattformen.

Vulnerabilities 4

Medium 6.0

CVE-2025-24471

An Improper Certificate Validation vulnerability [CWE-295] in FortiOS version 7.6.1 and below, version 7.4.7 and below …

Fortinet FortiOS Network devices

Jun 10, 2025
Medium 4.4

CVE-2024-50562 Public exploit

An Insufficient Session Expiration vulnerability [CWE-613] in FortiOS SSL-VPN version 7.6.0, version 7.4.6 and below, v…

Fortinet FortiOS FortiProxy FortiPAM Network devices

Jun 10, 2025
Low 3.9

CVE-2025-25250

An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS…

Fortinet FortiOS FortiSASE Network devices

Jun 10, 2025
Low 3.0

CVE-2025-22251

An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 …

Fortinet FortiOS Network devices

Jun 10, 2025

Revision history

2025-06-10 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-24-339 vom 2025-06-10
https://www.fortiguard.com/psirt/FG-IR-24-339
FortiGuard PSIRT Advisory FG-IR-24-287 vom 2025-06-10
https://www.fortiguard.com/psirt/FG-IR-24-287
FortiGuard PSIRT Advisory FG-IR-24-544 vom 2025-06-10
https://www.fortiguard.com/psirt/FG-IR-24-544
FortiGuard PSIRT Advisory FG-IR-24-257 vom 2025-06-10
https://www.fortiguard.com/psirt/FG-IR-24-257