Description
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiRecorder 7.2.0 through 7.2.1, FortiRecorder 7.0.0 through 7.0.4, FortiVoice 7.0.0 through 7.0.4, FortiVoice 6.4.0 through 6.4.9, FortiVoice 6.0 all versions, FortiWeb 7.6.0, FortiWeb 7.4.0 through 7.4.4, FortiWeb 7.2 all versions, FortiWeb 7.0 all versions, FortiWeb 6.4 all versions allows attacker to escalate privilege via specially crafted packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiVoice | 7.0.0 – ≤ 7.0.4, 6.4.0 – ≤ 6.4.9, 6.0.0 – ≤ 6.0.12 | — |
| Fortinet | FortiRecorder | 7.2.0 – ≤ 7.2.1, 7.0.0 – ≤ 7.0.4 | — |
| Fortinet | FortiWeb | 7.6.0, 7.4.0 – ≤ 7.4.4, 7.2.0 – ≤ 7.2.12, 7.0.0 – ≤ 7.0.12, 6.4.0 – ≤ 6.4.3 | — |
Advisories 5
- ICSA-25-044-06 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Mar 12, 2026
- SSA-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Mar 10, 2026
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- WID-SEC-2025-0095 Fortinet Produkte: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 14, 2025