CVE-2023-25610

In plain English

A critical-severity security flaw in FortiAnalyzer from Fortinet. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 18.3% (higher than 97% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Official description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Affected products (as reported)

Vendor	Product	Versions
Fortinet	FortiSwitchManager	7.2.0 – through 7.2.17.0.0 – through 7.0.1
Fortinet	FortiAnalyzer	7.2.07.0.0 – through 7.0.46.4.0 – through 6.4.116.2.0 – through 6.2.106.0.0 – through 6.0.11
Fortinet	FortiOS-6K7K	7.0.56.4.106.4.86.4.66.4.26.2.9 – through 6.2.126.2.6 – through 6.2.76.2.4
Fortinet	FortiProxy	7.2.0 – through 7.2.27.0.0 – through 7.0.82.0.0 – through 2.0.141.2.0 – through 1.2.131.1.0 – through 1.1.6
Fortinet	FortiOS	7.2.0 – through 7.2.37.0.0 – through 7.0.96.4.0 – through 6.4.116.2.0 – through 6.2.126.0.0 – through 6.0.185.6.0 – through 5.6.145.4.0 – through 5.4.135.2.0 – through 5.2.15
Fortinet	FortiManager	7.2.07.0.0 – through 7.0.46.4.0 – through 6.4.116.2.0 – through 6.2.106.0.0 – through 6.0.11
Fortinet	FortiWeb	7.2.0 – through 7.2.17.0.0 – through 7.0.66.4.0 – through 6.4.26.3.0 – through 6.3.226.2.0 – through 6.2.76.1.0 – through 6.1.3

In plain English

Official description

Affected products (as reported)

References