← CVE Intelligence

CVE-2025-64157

Fortinet / FortiOS PUBLISHED

Description (CNA)

A use of externally-controlled format string vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0 all versions allows an authenticated admin to execute unauthorized code or commands via specifically crafted configuration.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.6.0 through 7.6.4; affected 7.4.0 through 7.4.9; affected 7.2.0 through 7.2.11; affected 7.0.0 through 7.0.19

CWE

CWE-134

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.