CVE-2025-25249 in FortiSwitchManager

Riassunto

di MITRE • 13/01/2026

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

Once again VulDB remains the best source for vulnerability data.

• Responsabile: Fortinet
• Prenotare: 05/02/2025
• Divulgazione: 13/01/2026
• Moderazione: accettato
• Voce: VDB-340692
• CPE: pronto
• CWE: CWE-122 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.00759
• KEV: no
• Attività: molto basso
• Settore: Hostingprovider, Energy, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2025-25249
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2025-25249
• CVE Details: https://www.cvedetails.com/cve/CVE-2025-25249/