8.3High

CVE-2025-53844

Fortinet FortiOS; Siemens RUGGEDCOM APE1808 Published: 2026-05-12 19:54 (6 months ago)

Description

A out-of-bounds write vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11 allows attacker to execute unauthorized code or commands via specially crafted packets.

Weakness (CWE): CWE-787

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

Vendor	Product	Versions
Fortinet	FortiOS	7.6.0 – ≤ 7.6.3, 7.4.0 – ≤ 7.4.8, 7.2.0 – ≤ 7.2.11, 7.0.0 – ≤ 7.0.17, 6.4.0 – ≤ 6.4.16, 6.2.0 – ≤ 6.2.17, 6.0.0 – ≤ 6.0.18
Siemens	RUGGEDCOM APE1808	0

References and patches

CPE matches (NVD) (3)

cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.12
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.4.0 < 7.4.9
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* ≥ 7.6.0 < 7.6.4

CVSS score

8.3High

Source: fortinet · CVSS 3.1

Attack vector: Network
Attack complexity: Low
Privileges required: Low
User interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C

All scores (2)

cna	CVSS 3.1	8.3High
psirt@fortinet.com	CVSS 3.1	8.8High

EPSS (chance of exploitation in 30 days)

0.56%

higher than 47% of all CVEs

CISA assessment (SSVC)

Exploitation: none
Automatable: no
Technical impact: total

Timeline

ID reserved2025-07-10
Published2026-05-12 19:54
Reached IP-DB2026-10-24 23:58
Last updated2026-10-15 04:09

Assigned by (CNA): fortinet
NVD status: Modified

View at source: CVE.org · NVD

Get told when these products get a new vulnerability

Turn on email alerts

Free · with an account · switch off any time

Description

Affected products and versions

References and patches

CPE matches (NVD) (3)

Recent CVEs in the same product — Fortinet (all products)