WID-SEC-W-2025-1295

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Fortinet FortiOS und FortiProxy: Mehrere Schwachstellen

view advisory published 2025-06-10

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiOS und Fortinet FortiProxy ausnutzen, um Dateien zu manipulieren, um falsche Informationen darzustellen, und um seine Privilegien zu erhöhen.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2025-22862USmedium6.7OT elevated—
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] in FortiOS 7.4.0 through 7.4.7, 7.2.0 through 7.2.11, 7.0.6 and above; and FortiProxy 7.6.0 thro…
CVE-2024-50568US——
A channel accessible by non-endpoint vulnerability [CWE-300] in Fortinet FortiOS version 7.4.0 through 7.4.3, 7.2.0 through 7.2.7 and before 7.0.14 & FortiProxy version 7.4.0 throu…
CVE-2023-29184USlow2.3—
An incomplete cleanup vulnerability [CWE-459] in FortiOS 7.2 all versions and before & FortiProxy version 7.2.0 through 7.2.2 and before 7.0.8 allows a VDOM privileged attacker to…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan