CVEvulnerability

CVE-2025-47295

3.7 LOW Published 2025-05-28 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-05-28
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
CVSS 3.1 ([email protected])
3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L
Weaknesses
CWE-125, CWE-126

Description

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.

Affected configurations

• fortinet fortios (>= 6.4.0 < 7.0.15) • fortinet fortios (>= 7.2.0 < 7.2.8) • fortinet fortios (>= 7.4.0 < 7.4.4)

Related

Weakness · CWE (2)

  • CWE-125 Out-of-bounds Read weakness
  • CWE-126 Buffer Over-read weakness

References