Description
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Fortinet | FortiPAM | 1.5.0, 1.4.0 – ≤ 1.4.2, 1.3.0 – ≤ 1.3.1, 1.2.0, 1.1.0 – ≤ 1.1.2, 1.0.0 – ≤ 1.0.3 | — |
| Fortinet | FortiOS | 7.6.0 – ≤ 7.6.2, 7.4.0 – ≤ 7.4.6, 7.2.0 – ≤ 7.2.10, 7.0.2 – ≤ 7.0.16 | — |
| Fortinet | FortiSRA | 1.5.0, 1.4.0 – ≤ 1.4.2 | — |
| Fortinet | FortiProxy | 7.6.0 – ≤ 7.6.1, 7.4.0 – ≤ 7.4.7 | — |
| Fortinet | FortiSwitchManager | 7.2.1 – ≤ 7.2.5 | — |
Advisories 3
- ICSA-25-044-06 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Mar 12, 2026
- SSA-770770 SSA-770770: Multiple Vulnerabilities in Fortigate NGFW Before V7.4.7 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Mar 10, 2026
- WID-SEC-2025-2286 Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen BSI CERT-Bund (WID) · Oct 14, 2025