← CVE Intelligence

CVE-2025-53744

Fortinet / FortiOS PUBLISHED

Description (CNA)

An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.6.0 through 7.6.2; affected 7.4.0 through 7.4.7; affected 7.2.0 through 7.2.11; affected 7.0.0 through 7.0.17; affected 6.4.0 through 6.4.16

CWE

CWE-266

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.