Yüksek CVSS 7.2
CVE-2025-22258: Fortios: yığın (heap) taşması
Açıklama (NVD)
A heap-based buffer overflow in Fortinet FortiSRA 1.5.0, 1.4.0 through 1.4.2, FortiPAM 1.5.0, 1.4.0 through 1.4.2, 1.3.0 through 1.3.1, 1.2.0, 1.1.0 through 1.1.2, 1.0.0 through 1.0.3, FortiProxy 7.6.0 through 7.6.1, 7.4.0 through 7.4.7, FortiOS 7.6.0 through 7.6.2, 7.4.0 through 7.4.6, 7.2.0 through 7.2.10, 7.0.2 through 7.0.16, FortiSwitchManager 7.2.1 through 7.2.5 allows attackers to escalate their privilege via specially crafted http requests.
Özet bilgiler
- Ürün
- Fortinet Fortios
- CVSS v3.1
- 7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - EPSS
- %0,56 (yüzdelik 47)
- CWE
- CWE-122
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| fortinet-fortios | 7.0.2 | — | 7.0.17 |
| fortinet-fortios | 7.2.0 | — | 7.2.11 |
| fortinet-fortios | 7.4.0 | — | 7.4.7 |
| fortinet-fortios | 7.6.0 | — | 7.6.3 |
| fortinet-fortipam | 1.0.0 | — | 1.4.3 |
| fortinet-fortipam | 1.5.0 | 1.5.0 | — |
| fortinet-fortiproxy | 7.4.0 | — | 7.4.8 |
| fortinet-fortiproxy | 7.6.0 | — | 7.6.2 |
| fortinet-fortisra | 1.4.0 | — | 1.4.3 |
| fortinet-fortisra | 1.5.0 | 1.5.0 | — |
| fortinet-fortiswitchmanager | 7.2.1 | — | 7.2.6 |