Description
A stack-based buffer overflow [CWE-121] vulnerability in Fortinet FortiOS version 7.2.4 through 7.2.8 and version 7.4.0 through 7.4.4 allows a remote unauthenticated attacker to execute arbitrary code or commands via crafted UDP packets through the CAPWAP control, provided the attacker were able to evade FortiOS stack protections and provided the fabric service is running on the exposed interface.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiOS | 7.4.0 – ≤ 7.4.4, 7.2.4 – ≤ 7.2.8 | — |
Advisories 4
- ICSA-25-044-06 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Mar 12, 2026
- SSA-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Mar 10, 2026
- NCSC-2025-0059 Kwetsbaarheid verholpen in Fortinet FortiOS NCSC-NL (Netherlands) · Feb 13, 2025
- WID-SEC-2025-0319 Fortinet FortiOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 11, 2025