Description
A out-of-bounds write in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.0 through 7.0.16, 6.4.0 through 6.4.15 allows attacker to trigger a denial of service via specially crafted packets.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiProxy | 7.4.0 – ≤ 7.4.5, 7.2.0 – ≤ 7.2.13, 7.0.0 – ≤ 7.0.20, 2.0.0 – ≤ 2.0.14 | — |
| Fortinet | FortiOS | 7.6.0, 7.4.0 – ≤ 7.4.6, 7.2.0 – ≤ 7.2.10, 7.0.0 – ≤ 7.0.16, 6.4.0 – ≤ 6.4.15 | — |
| Fortinet | FortiPAM | 1.4.0 – ≤ 1.4.2, 1.3.0 – ≤ 1.3.1, 1.2.0, 1.1.0 – ≤ 1.1.2, 1.0.0 – ≤ 1.0.3 | — |
Advisories 7
- SSA-864900 SSA-864900: Multiple Vulnerabilities in Fortigate NGFW before V7.6.6 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Oct 13, 2026
- ICSA-25-135-01 Siemens RUGGEDCOM APE1808 Devices CISA ICS & IT advisories · Jul 9, 2026
- NCSC-2025-0160 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · May 14, 2025
- NCSC-2025-0061 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 14, 2025
- NCSC-2025-0051 Kwetsbaarheden verholpen in Siemens producten NCSC-NL (Netherlands) · Feb 11, 2025
- NCSC-2025-0018 Kwetsbaarheden verholpen in Fortinet FortiSwitch, FortiManager, FortiAnalyzer, FortiOS en FortiProxy NCSC-NL (Netherlands) · Jan 15, 2025
- WID-SEC-2025-0088 Fortinet FortiOS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 14, 2025