← Back

CVE-2025-25248

nvd nist
Published: Aug 12, 2025Modified: Jun 17, 2026

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

Affected (7)

Fortinet
3 products
Fortios
Fortipam
Fortiproxy
Configuration A
3 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
From 6.4.0 to 7.2.11
Fortios
From 7.4.0 to 7.4.8
Fortios
From 7.6.0 to 7.6.3
Configuration B
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortipam
From 1.0.0 to 1.4.3
Fortipam
Version 1.5.0
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortiproxy
From 2.0.0 to 7.4.4
Fortiproxy
From 7.6.0 to 7.6.3

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: psirt@fortinet.com
Vendor Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.