← Back

CVE-2025-61624

nvd nist
Published: Apr 14, 2026Modified: Oct 17, 2026CISA KEV

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Exploitability: 1.2 / Impact: 5.2
Source: NVD

Description

An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

Affected (8)

Fortinet
4 products
Fortios
Fortipam
Fortiproxy
Fortiswitchmanager
Siemens
1 product
Ruggedcom Ape1808 Firmware
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortios
6.4.0 ≤ version < 7.4.10
Fortios
7.6.0 ≤ version < 7.6.5
Configuration B
1 vulnerable
Vulnerable SoftwareAffected Versions
Fortipam
1.0.0 ≤ version < 1.7.1
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortiproxy
7.0.0 ≤ version < 7.4.12
Fortiproxy
7.6.0 ≤ version < 7.6.5
Configuration D
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Fortiswitchmanager
7.0.0 ≤ version < 7.0.7
Fortiswitchmanager
7.2.0 ≤ version < 7.2.8
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Ruggedcom Ape1808 Firmware
All versions
Running on/withPlatform Versions
Siemens
Ruggedcom Ape1808
All versions

Related CWEs

CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

Source: psirt@fortinet.com
Vendor Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.