IP-DB.com
Türkçe English Deutsch Español
Giriş API Anahtarı Al
9.6Kritik KEV

CVE-2025-32756Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

Fortinet FortiNDR; Fortinet FortiCamera; Fortinet FortiRecorder; Fortinet FortiVoice Yayım: (1 yıl önce)

Aktif olarak istismar ediliyor — Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability

CISA bu açığın gerçek saldırılarda kullanıldığını 14.05.2025 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 04.06.2025.

Gerekli işlem: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable. https://fortiguard.fortinet.com/psirt/FG-IR-25-254 ; https://nvd.nist.gov/vuln/detail/CVE-2025-32756

Açıklama

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Zayıflık türü (CWE): CWE-121CWE-787

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Fortinet FortiCamera 2.1.0 – ≤ 2.1.3, 2.0.0, 1.1.0 – ≤ 1.1.5
fortinet forticamera firmware 2.0.0 – ≤ 2.1.3
Fortinet FortiMail 7.6.0 – ≤ 7.6.2, 7.4.0 – ≤ 7.4.4, 7.2.0 – ≤ 7.2.7, 7.0.0 – ≤ 7.0.8
Fortinet FortiNDR 7.6.0, 7.4.0 – ≤ 7.4.7, 7.2.0 – ≤ 7.2.4, 7.1.0 – ≤ 7.1.1, 7.0.0 – ≤ 7.0.6, 1.5.0 – ≤ 1.5.3, 1.4.0, 1.3.0 – ≤ 1.3.1, 1.2.0, 1.1.0
Fortinet FortiRecorder 7.2.0 – ≤ 7.2.3, 7.0.0 – ≤ 7.0.5, 6.4.0 – ≤ 6.4.5
Fortinet FortiVoice 7.2.0, 7.0.0 – ≤ 7.0.6, 6.4.0 – ≤ 6.4.10

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (23)
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.9
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.8
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:* ≥ 7.4.0 < 7.4.5
  • cpe:2.3:a:fortinet:fortimail:*:*:*:*:*:*:*:* ≥ 7.6.0 < 7.6.3
  • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.7
  • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.5
  • cpe:2.3:a:fortinet:fortindr:*:*:*:*:*:*:*:* ≥ 7.4.0 < 7.4.8
  • cpe:2.3:a:fortinet:fortindr:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:7.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:7.1.1:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortindr:7.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:* ≥ 6.4.0 < 6.4.6
  • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.6
  • cpe:2.3:a:fortinet:fortirecorder:*:*:*:*:*:*:*:* ≥ 7.2.0 < 7.2.4
  • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:* ≥ 6.4.0 < 6.4.11
  • cpe:2.3:a:fortinet:fortivoice:*:*:*:*:*:*:*:* ≥ 7.0.0 < 7.0.7
  • cpe:2.3:a:fortinet:fortivoice:7.2.0:*:*:*:*:*:*:*
  • cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:* ≥ 2.0.0 ≤ 2.1.3
  • cpe:2.3:o:fortinet:forticamera_firmware:*:*:*:*:*:*:*:* ≥ 1.1.0 ≤ 1.1.5

Aynı üründe son açıklar — Fortinet (all products)

6.7Orta
CVE-2026-106174
Fortinet FortiOS

A improper locking vulnerability in Fortinet FortiOS 8.0.0, FortiOS 7.6.4 through 7.6.6 may allow an unauthenticated attacker with network access to the device to cause a denial of service of the HTTPS management interface via crafted HTTP requests.

9.6Kritik
CVE-2026-107656
Fortinet FortiSandbox; Fortinet FortiSandbox PaaS

An authentication bypass using an alternate path or channel vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4.0 through 4.4.9, FortiSandbox 4.2 all versions, FortiSandbox PaaS 5.0.0 through 5.0.6, FortiSandbox PaaS 4.4 all versions,…

2.1Düşük
CVE-2026-106175
Fortinet FortiOS; Fortinet FortiSwitch; Fortinet FortiProxy

A Double Free vulnerability [CWE-415] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.8, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiProxy 7.6.0 through 7.6.6, FortiProxy 7.4 all versions, FortiProxy 7.2 all versions…

4.9Orta
CVE-2026-106172
Fortinet FortiSandbox; Fortinet FortiSandbox Cloud

A use of hard-coded cryptographic key vulnerability in Fortinet FortiSandbox 5.2.0 through 5.2.1, FortiSandbox 5.0.0 through 5.0.6, FortiSandbox 4.4 all versions, FortiSandbox Cloud 5.2.0 through 5.2.1, FortiSandbox Cloud 5.0.0 through 5.0.6, FortiSandbox Clo…

7.9Yüksek
CVE-2025-46773
Fortinet FortiAnalyzer Cloud; Fortinet FortiAnalyzer

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.7, FortiAnalyzer 7.2 all versions, FortiAnalyzer Cloud …

6.5Orta
CVE-2026-23705
Fortinet FortiAnalyzer; Fortinet FortiManager

An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.2, FortiAnalyzer 7.4.0 through 7.4.6, FortiAnalyzer 7.2.0 through 7.2.13, FortiManager 7.4…