← CVE Intelligence

CVE-2025-67862

Fortinet / FortiOS PUBLISHED

Description (CNA)

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3, FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

Affected (CNA)

Vendor / productVersions
Fortinet / FortiOSaffected 7.6.0 through 7.6.1; affected 7.4.0 through 7.4.6; affected 7.2.0 through 7.2.10; affected 7.0.0 through 7.0.16; affected 6.4.0 through 6.4.16
Fortinet / FortiProxyaffected 7.6.0 through 7.6.3; affected 7.4.0 through 7.4.10; affected 7.2.0 through 7.2.14; affected 7.0.0 through 7.0.23

CWE

CWE-1244

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

siemens-SADP

No English description supplied.