CVE-2025-25249

Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability

Fortios

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

13. Jan 2026

Ausgewertete Quellen

• Hersteller
  https://fortiguard.fortinet.com/psirt/FG-IR-25-084
• Hinweis
  https://cert-portal.siemens.com/productcert/html/ssa-864900.html
• Hinweis
  https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249
• CISA
  Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability
• NVD
  CVE-2025-25249