Skip to content
OpenAdvisories
Critical · 9.3 Public exploit CVE-2023-25610 EUVD-2023-29551GHSA-wvpr-v2qr-ccvf

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, ver…

Published Mar 24, 2025 · Updated Mar 24, 2025 · Assigned by fortinet

Vendor: Fortinet Product: FortiAnalyzer Product: FortiManager Product: FortiOS Product: FortiOS-6K7K Product: FortiProxy Product: FortiSwitchManager Product: FortiWeb Category: Network devices

Description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected products

VendorProductAffectedFixed
Fortinet FortiSwitchManager 7.2.0 – ≤ 7.2.1, 7.0.0 – ≤ 7.0.1 —
Fortinet FortiAnalyzer 7.2.0, 7.0.0 – ≤ 7.0.4, 6.4.0 – ≤ 6.4.11, 6.2.0 – ≤ 6.2.10, 6.0.0 – ≤ 6.0.11 —
Fortinet FortiOS-6K7K 7.0.5, 6.4.10, 6.4.8, 6.4.6, 6.4.2, 6.2.9 – ≤ 6.2.12, 6.2.6 – ≤ 6.2.7, 6.2.4, 6.0.12 – ≤ 6.0.18, 6.0.10 —
Fortinet FortiProxy 7.2.0 – ≤ 7.2.2, 7.0.0 – ≤ 7.0.8, 2.0.0 – ≤ 2.0.14, 1.2.0 – ≤ 1.2.13, 1.1.0 – ≤ 1.1.6 —
Fortinet FortiOS 7.2.0 – ≤ 7.2.3, 7.0.0 – ≤ 7.0.9, 6.4.0 – ≤ 6.4.11, 6.2.0 – ≤ 6.2.12, 6.0.0 – ≤ 6.0.18, 5.6.0 – ≤ 5.6.14, 5.4.0 – ≤ 5.4.13, 5.2.0 – ≤ 5.2.15, 5.0.0 – ≤ 5.0.14 —
Fortinet FortiManager 7.2.0, 7.0.0 – ≤ 7.0.4, 6.4.0 – ≤ 6.4.11, 6.2.0 – ≤ 6.2.10, 6.0.0 – ≤ 6.0.11 —
Fortinet FortiWeb 7.2.0 – ≤ 7.2.1, 7.0.0 – ≤ 7.0.6, 6.4.0 – ≤ 6.4.2, 6.3.0 – ≤ 6.3.22, 6.2.0 – ≤ 6.2.7, 6.1.0 – ≤ 6.1.3 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • qi4L/CVE-2023-25610 ★ 23 · Jun 17, 2023

    FortiOS 管理界面中的堆内存下溢导致远程代码执行

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Advisories 2

References