CVE-2025-25248

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.6 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-24-364	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::
	cpe:2.3:o:fortinet:fortios::::::::

Configuration 2 (hide)

OR	cpe:2.3:o:fortinet:fortipam::::::::
	cpe:2.3:o:fortinet:fortipam:1.5.0:::::::*

Configuration 3 (hide)

OR	cpe:2.3:a:fortinet:fortiproxy::::::::
	cpe:2.3:a:fortinet:fortiproxy::::::::

History

No history.

Information

Published : 2025-08-12 19:15

Updated : 2025-08-14 01:21

NVD link : CVE-2025-25248

Mitre link : CVE-2025-25248

CVE.ORG link : CVE-2025-25248

JSON object : View

Products Affected

fortinet

fortipam
fortiproxy
fortios

CWE

CWE-190

Integer Overflow or Wraparound

{"id": "CVE-2025-25248", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}, {"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2025-08-12T19:15:28.530", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-364", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-190"}]}], "descriptions": [{"lang": "en", "value": "An\u00a0Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de entero o envolvente [CWE-190] en FortiOS versi\u00f3n 7.6.2 y anteriores, versi\u00f3n 7.4.7 y anteriores, versi\u00f3n 7.2.10 y anteriores, 7.2 todas las versiones, 6.4 todas las versiones, FortiProxy versi\u00f3n 7.6.2 y anteriores, versi\u00f3n 7.4.3 y anteriores, 7.2 todas las versiones, 7.0 todas las versiones, 2.0 todas las versiones y FortiPAM versi\u00f3n 1.5.0, versi\u00f3n 1.4.2 y anteriores, 1.3 todas las versiones, 1.2 todas las versiones, 1.1 todas las versiones, 1.0 todas las versiones Los marcadores SSL-VPN RDP y VNC pueden permitir que un usuario autenticado afecte la disponibilidad de SSL-VPN del dispositivo a trav\u00e9s de solicitudes manipuladas."}], "lastModified": "2025-08-14T01:21:03.040", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "753664B2-3AE8-499A-9C8A-B7D928439697", "versionEndExcluding": "7.2.11", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26515743-5A9A-4885-A08E-535E4ABE0153", "versionEndExcluding": "7.4.8", "versionStartIncluding": "7.4.0"}, {"criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D6B883B9-9ECD-4BC5-B497-770F34F92473", "versionEndExcluding": "7.6.3", "versionStartIncluding": "7.6.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6C39FBB2-E81C-4207-AFDD-080EC80F00A3", "versionEndExcluding": "1.4.3", "versionStartIncluding": "1.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortipam:1.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0401C6C0-DC87-4728-873E-6DA489C859A8"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85275281-B082-4A93-9794-7625F8C205C3", "versionEndExcluding": "7.4.4", "versionStartIncluding": "2.0.0"}, {"criteria": "cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50E93879-C162-4280-9687-89A4ADBB7287", "versionEndExcluding": "7.6.3", "versionStartIncluding": "7.6.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}