NLShown in its original language — a full translation is planned for a future version.
Kwetsbaarheden verholpen in Fortinet producten
view advisory published 2025-05-14
Fortinet heeft kwetsbaarheden verholpen in FortiManager, FortiManager Cloud, FortiAnalyzer, FortiOS, FortiProxy, FortiPAM, FortiSRA, FortiSwitchManager en FortiWeb.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-47295US | low3.7 | — | ||
A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to… | ||||
| CVE-2025-47294US | medium5.3 | — | ||
A integer overflow or wraparound in Fortinet FortiOS versions 7.2.0 through 7.2.7, versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the csfd daemo… | ||||
| CVE-2025-22252US | high7.2OT elevated | — | ||
A missing authentication for critical function in Fortinet FortiProxy versions 7.6.0 through 7.6.1, FortiSwitchManager version 7.2.5, and FortiOS versions 7.4.4 through 7.4.6 and v… | ||||
| CVE-2024-54020US | medium4.3OT elevated | — | ||
A missing authorization in Fortinet FortiManager versions 7.2.0 through 7.2.1, and versions 7.0.0 through 7.0.7 may allow an authenticated attacker to overwrite global threat feeds… | ||||
| CVE-2024-45324US | — | — | ||
A use of externally-controlled format string vulnerability [CWE-134] in FortiOS version 7.4.0 through 7.4.4, version 7.2.0 through 7.2.9, version 7.0.0 through 7.0.15 and before 6.… | ||||
| CVE-2025-26466US | medium5.9 | Exploit | ||
A flaw was found in the OpenSSH package. For each ping packet the SSH server receives, a pong packet is allocated in a memory buffer and stored in a queue of packages. It is only f… | ||||
| CVE-2024-6387US | high8.1 | Exploit | ||
A security regression (CVE-2006-5051) was discovered in OpenSSH's server (sshd). There is a race condition which can lead sshd to handle some signals in an unsafe manner. An unauth… | ||||
| CVE-2023-48795US | medium5.9OT high | Exploit | ||
The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packet… | ||||
| CVE-2023-42788US | medium6.7 | — | ||
An improper neutralization of special elements used in an os command ('OS Command Injection') vulnerability [CWE-78] in FortiManager & FortiAnalyzer version 7.4.0, version 7.2.0 th… | ||||
02
references
External citations — patches, advisories, analysis.
- Reference - ncscclearexternal
- Reference - certbunddeexternal
- Reference - ncscclearexternal
- Reference - cveprojectv5; nvdexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
- Reference - ncscclearexternal
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan