CVE-2023-25610 (GCVE-0-2023-25610)
Vulnerability from cvelistv5 – Published: 2025-03-24 15:39 – Updated: 2025-03-24 18:42
VLAI
Summary
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Severity
9.3 (Critical)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: total
CISA Coordinator (v2.0.3)
CWE
- CWE-124 - Execute unauthorized code or commands
Assigner
References
1 reference
Impacted products
7 products
| Vendor | Product | Version | |
|---|---|---|---|
| Fortinet | FortiSwitchManager |
Affected:
7.2.0 , ≤ 7.2.1
(semver)
Affected: 7.0.0 , ≤ 7.0.1 (semver) |
|
| Fortinet | FortiAnalyzer |
Affected:
7.2.0
Affected: 7.0.0 , ≤ 7.0.4 (semver) Affected: 6.4.0 , ≤ 6.4.11 (semver) Affected: 6.2.0 , ≤ 6.2.10 (semver) Affected: 6.0.0 , ≤ 6.0.11 (semver) cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:* |
|
| Fortinet | FortiOS-6K7K |
Affected:
7.0.5
Affected: 6.4.10 Affected: 6.4.8 Affected: 6.4.6 Affected: 6.4.2 Affected: 6.2.9 , ≤ 6.2.12 (semver) Affected: 6.2.6 , ≤ 6.2.7 (semver) Affected: 6.2.4 Affected: 6.0.12 , ≤ 6.0.18 (semver) Affected: 6.0.10 |
|
| Fortinet | FortiProxy |
Affected:
7.2.0 , ≤ 7.2.2
(semver)
Affected: 7.0.0 , ≤ 7.0.8 (semver) Affected: 2.0.0 , ≤ 2.0.14 (semver) Affected: 1.2.0 , ≤ 1.2.13 (semver) Affected: 1.1.0 , ≤ 1.1.6 (semver) |
|
| Fortinet | FortiOS |
Affected:
7.2.0 , ≤ 7.2.3
(semver)
Affected: 7.0.0 , ≤ 7.0.9 (semver) Affected: 6.4.0 , ≤ 6.4.11 (semver) Affected: 6.2.0 , ≤ 6.2.12 (semver) Affected: 6.0.0 , ≤ 6.0.18 (semver) Affected: 5.6.0 , ≤ 5.6.14 (semver) Affected: 5.4.0 , ≤ 5.4.13 (semver) Affected: 5.2.0 , ≤ 5.2.15 (semver) Affected: 5.0.0 , ≤ 5.0.14 (semver) cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:* |
|
| Fortinet | FortiManager |
Affected:
7.2.0
Affected: 7.0.0 , ≤ 7.0.4 (semver) Affected: 6.4.0 , ≤ 6.4.11 (semver) Affected: 6.2.0 , ≤ 6.2.10 (semver) Affected: 6.0.0 , ≤ 6.0.11 (semver) cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:* cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:* |
|
| Fortinet | FortiWeb |
Affected:
7.2.0 , ≤ 7.2.1
(semver)
Affected: 7.0.0 , ≤ 7.0.6 (semver) Affected: 6.4.0 , ≤ 6.4.2 (semver) Affected: 6.3.0 , ≤ 6.3.22 (semver) Affected: 6.2.0 , ≤ 6.2.7 (semver) Affected: 6.1.0 , ≤ 6.1.3 (semver) |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2023-25610",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2025-03-24T16:26:39.771566Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2025-03-24T18:42:44.673Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"cpes": [],
"defaultStatus": "unaffected",
"product": "FortiSwitchManager",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.2.1",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.1",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "FortiAnalyzer",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "7.2.0"
},
{
"lessThanOrEqual": "7.0.4",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.11",
"status": "affected",
"version": "6.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.10",
"status": "affected",
"version": "6.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.0.11",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"cpes": [],
"defaultStatus": "unaffected",
"product": "FortiOS-6K7K",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "7.0.5"
},
{
"status": "affected",
"version": "6.4.10"
},
{
"status": "affected",
"version": "6.4.8"
},
{
"status": "affected",
"version": "6.4.6"
},
{
"status": "affected",
"version": "6.4.2"
},
{
"lessThanOrEqual": "6.2.12",
"status": "affected",
"version": "6.2.9",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.7",
"status": "affected",
"version": "6.2.6",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.2.4"
},
{
"lessThanOrEqual": "6.0.18",
"status": "affected",
"version": "6.0.12",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.0.10"
}
]
},
{
"cpes": [],
"defaultStatus": "unaffected",
"product": "FortiProxy",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.2.2",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.8",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "2.0.14",
"status": "affected",
"version": "2.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "1.2.13",
"status": "affected",
"version": "1.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "1.1.6",
"status": "affected",
"version": "1.1.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "FortiOS",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.2.3",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.9",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.11",
"status": "affected",
"version": "6.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.12",
"status": "affected",
"version": "6.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.0.18",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.6.14",
"status": "affected",
"version": "5.6.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.4.13",
"status": "affected",
"version": "5.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.2.15",
"status": "affected",
"version": "5.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "5.0.14",
"status": "affected",
"version": "5.0.0",
"versionType": "semver"
}
]
},
{
"cpes": [
"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*",
"cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*"
],
"defaultStatus": "unaffected",
"product": "FortiManager",
"vendor": "Fortinet",
"versions": [
{
"status": "affected",
"version": "7.2.0"
},
{
"lessThanOrEqual": "7.0.4",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.11",
"status": "affected",
"version": "6.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.10",
"status": "affected",
"version": "6.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.0.11",
"status": "affected",
"version": "6.0.0",
"versionType": "semver"
}
]
},
{
"cpes": [],
"defaultStatus": "unaffected",
"product": "FortiWeb",
"vendor": "Fortinet",
"versions": [
{
"lessThanOrEqual": "7.2.1",
"status": "affected",
"version": "7.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "7.0.6",
"status": "affected",
"version": "7.0.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.4.2",
"status": "affected",
"version": "6.4.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.3.22",
"status": "affected",
"version": "6.3.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.2.7",
"status": "affected",
"version": "6.2.0",
"versionType": "semver"
},
{
"lessThanOrEqual": "6.1.3",
"status": "affected",
"version": "6.1.0",
"versionType": "semver"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "A buffer underwrite (\u0027buffer underflow\u0027) vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.3,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-124",
"description": "Execute unauthorized code or commands",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2025-03-24T15:39:48.167Z",
"orgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"shortName": "fortinet"
},
"references": [
{
"name": "https://fortiguard.com/psirt/FG-IR-23-001",
"url": "https://fortiguard.com/psirt/FG-IR-23-001"
}
],
"solutions": [
{
"lang": "en",
"value": "Please upgrade to FortiOS version 7.4.0 or above\r\nPlease upgrade to FortiOS version 7.2.4 or above\r\nPlease upgrade to FortiOS version 7.0.10 or above\r\nPlease upgrade to FortiOS version 6.4.12 or above\r\nPlease upgrade to FortiOS version 6.2.13 or above\r\nPlease upgrade to FortiWeb version 7.2.2 or above\r\nPlease upgrade to FortiWeb version 7.0.7 or above\r\nPlease upgrade to FortiWeb version 6.4.3 or above\r\nPlease upgrade to FortiWeb version 6.3.23 or above\r\nPlease upgrade to FortiWeb version 6.2.8 or above\r\nPlease upgrade to FortiWeb version 6.1.4 or above\r\nPlease upgrade to upcoming FortiOS version 6.0.17 or above\r\nPlease upgrade to FortiSwitchManager version 7.2.2 or above\r\nPlease upgrade to FortiSwitchManager version 7.0.2 or above\r\nPlease upgrade to FortiProxy version 7.2.3 or above\r\nPlease upgrade to FortiProxy version 7.0.9 or above\r\nPlease upgrade to FortiManager version 7.2.1 or above\r\nPlease upgrade to FortiManager version 7.0.5 or above\r\nPlease upgrade to FortiManager version 6.4.12 or above\r\nPlease upgrade to FortiManager version 6.2.11 or above\r\nPlease upgrade to FortiManager version 6.0.12 or above\r\nPlease upgrade to FortiOS-6K7K version 7.0.10 or above\r\nPlease upgrade to FortiOS-6K7K version 6.4.12 or above\r\nPlease upgrade to FortiOS-6K7K version 6.2.13 or above\r\nPlease upgrade to FortiAnalyzer version 7.2.1 or above\r\nPlease upgrade to FortiAnalyzer version 7.0.5 or above\r\nPlease upgrade to FortiAnalyzer version 6.4.12 or above\r\nPlease upgrade to FortiAnalyzer version 6.2.11 or above\r\nPlease upgrade to FortiAnalyzer version 6.0.12 or above\r\n\r\n\r\n## Workaround for FortiOS:\r\n\r\n\r\n\r\nDisable HTTP/HTTPS administrative interface\r\n\r\nOR\r\n\r\nLimit IP addresses that can reach the administrative interface:\r\n\r\n\r\n```\r\nconfig firewall address\r\nedit my_allowed_addresses\r\nset subnet Y IP MY SUBNET\r\nend\r\n```\r\n\r\nThen create an Address Group:\r\n\r\n\r\n```\r\nconfig firewall addrgrp\r\nedit MGMT_IPs\r\nset member my_allowed_addresses\r\nend\r\n```\r\n\r\nCreate the Local in Policy to restrict access only to the predefined group on management interface (here: port1):\r\n\r\n\r\n```\r\nconfig firewall local-in-policy\r\nedit 1\r\nset intf port1\r\nset srcaddr MGMT_IPs\r\nset dstaddr all\r\nset action accept\r\nset service HTTPS HTTP\r\nset schedule always\r\nset status enable\r\nnext\r\n\r\n\r\n\r\nedit 2\r\nset intf any\r\nset srcaddr all\r\nset dstaddr all\r\nset action deny\r\nset service HTTPS HTTP\r\nset schedule always\r\nset status enable\r\nend\r\n```\r\n\r\n\r\nIf using non default ports, create appropriate service object for GUI administrative access:\r\n\r\n```\r\nconfig firewall service custom\r\nedit GUI_HTTPS\r\nset tcp-portrange admin-sport\r\nnext\r\nedit GUI_HTTP\r\nset tcp-portrange admin-port\r\nend\r\n```\r\n\r\n\r\nUse these objects instead of \"HTTPS HTTP\" in the local-in policy 1 and 2 below.\r\n\r\n\r\nWhen using an HA reserved management interface, the local in policy needs to be configured slightly differently - please see: \r\n\r\nhttps://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-a-local-in-policy-on-a-HA/ta-p/222005\r\n\r\nPlease contact customer support for assistance.\r\n\r\n\r\n## Workaround for FortiManager and FortiAnalyzer:\r\n\r\n\r\nLimit IP addresses that can reach the administrative interface\r\n\r\n\r\n## Workaround for FortiWeb:\r\n\r\n\r\n\r\nDisable HTTP/HTTPS administrative interface\r\n\r\nOR\r\n\r\nLimit IP addresses that can reach the administrative interface"
}
]
}
},
"cveMetadata": {
"assignerOrgId": "6abe59d8-c742-4dff-8ce8-9b0ca1073da8",
"assignerShortName": "fortinet",
"cveId": "CVE-2023-25610",
"datePublished": "2025-03-24T15:39:48.167Z",
"dateReserved": "2023-02-08T13:42:03.367Z",
"dateUpdated": "2025-03-24T18:42:44.673Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2023-25610",
"date": "2026-06-29",
"epss": "0.17797",
"percentile": "0.96791"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2023-25610\",\"sourceIdentifier\":\"psirt@fortinet.com\",\"published\":\"2025-03-24T16:15:17.273\",\"lastModified\":\"2026-06-17T05:41:36.590\",\"vulnStatus\":\"Analyzed\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A buffer underwrite (\u0027buffer underflow\u0027) vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad de suscripci\u00f3n de b\u00fafer (\u0027desbordamiento de b\u00fafer\u0027) en la interfaz administrativa de Fortinet FortiOS versi\u00f3n 7.2.0 a 7.2.3, versi\u00f3n 7.0.0 a 7.0.6, versi\u00f3n 6.4.0 a 6.4.11 y versi\u00f3n 6.2.12 y anteriores, FortiProxy versi\u00f3n 7.2.0 a 7.2.2, versi\u00f3n 7.0.0 a 7.0.8, versi\u00f3n 2.0.12 y anteriores y FortiOS-6K7K versi\u00f3n 7.0.5, versi\u00f3n 6.4.0 a 6.4.10 y versi\u00f3n 6.2.0 a 6.2.10 y anteriores permite a un atacante remoto no autenticado ejecutar c\u00f3digo o comandos arbitrarios a trav\u00e9s de solicitudes espec\u00edficamente manipuladas.\"}],\"affected\":[{\"source\":\"psirt@fortinet.com\",\"affectedData\":[{\"vendor\":\"Fortinet\",\"product\":\"FortiSwitchManager\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.1\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiAnalyzer\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.0.0\",\"lessThanOrEqual\":\"6.0.11\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiOS-6K7K\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.0.5\",\"status\":\"affected\"},{\"version\":\"6.4.10\",\"status\":\"affected\"},{\"version\":\"6.4.8\",\"status\":\"affected\"},{\"version\":\"6.4.6\",\"status\":\"affected\"},{\"version\":\"6.4.2\",\"status\":\"affected\"},{\"version\":\"6.2.9\",\"lessThanOrEqual\":\"6.2.12\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.6\",\"lessThanOrEqual\":\"6.2.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.4\",\"status\":\"affected\"},{\"version\":\"6.0.12\",\"lessThanOrEqual\":\"6.0.18\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.0.10\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiProxy\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.8\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"2.0.0\",\"lessThanOrEqual\":\"2.0.14\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.2.0\",\"lessThanOrEqual\":\"1.2.13\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.1.0\",\"lessThanOrEqual\":\"1.1.6\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiOS\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.3\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.9\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.12\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.0.0\",\"lessThanOrEqual\":\"6.0.18\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.6.0\",\"lessThanOrEqual\":\"5.6.14\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.4.0\",\"lessThanOrEqual\":\"5.4.13\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.2.0\",\"lessThanOrEqual\":\"5.2.15\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"5.0.0\",\"lessThanOrEqual\":\"5.0.14\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiManager\",\"defaultStatus\":\"unaffected\",\"cpes\":[\"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*\",\"cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*\"],\"versions\":[{\"version\":\"7.2.0\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.4\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.10\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.0.0\",\"lessThanOrEqual\":\"6.0.11\",\"versionType\":\"semver\",\"status\":\"affected\"}]},{\"vendor\":\"Fortinet\",\"product\":\"FortiWeb\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"7.2.0\",\"lessThanOrEqual\":\"7.2.1\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"7.0.0\",\"lessThanOrEqual\":\"7.0.6\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.4.0\",\"lessThanOrEqual\":\"6.4.2\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.3.0\",\"lessThanOrEqual\":\"6.3.22\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.2.0\",\"lessThanOrEqual\":\"6.2.7\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"6.1.0\",\"lessThanOrEqual\":\"6.1.3\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\",\"baseScore\":9.8,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.9}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-03-24T16:26:39.771566Z\",\"id\":\"CVE-2023-25610\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"yes\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"psirt@fortinet.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-124\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.1.0\",\"versionEndExcluding\":\"6.1.4\",\"matchCriteriaId\":\"A97E35C7-F21A-49B2-9135-D6FCB727FA14\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.0\",\"versionEndExcluding\":\"6.2.8\",\"matchCriteriaId\":\"42CE94E5-B32F-4253-B8AC-2CDB29CDD117\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.3.0\",\"versionEndExcluding\":\"6.3.23\",\"matchCriteriaId\":\"5154C61F-FC94-4D55-853D-22ECD0AD05CC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndExcluding\":\"6.4.3\",\"matchCriteriaId\":\"F2E8538B-42EF-4348-ADF2-78FF0977A1E1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.7\",\"matchCriteriaId\":\"B34855D1-69A4-4971-98B9-7AAF3E27A1F5\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.2\",\"matchCriteriaId\":\"62EDCC39-DD0C-40B7-BA83-6D6FF944E19D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.2\",\"matchCriteriaId\":\"90721212-587E-40B0-AF9A-3367DBC991EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.2\",\"matchCriteriaId\":\"27F1D4EB-E172-4AE4-BF5E-B13D86B68E78\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.7\",\"matchCriteriaId\":\"59494F87-7305-4531-B7C1-E9E50CDEC44F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.4\",\"matchCriteriaId\":\"E16C1EC2-26C8-4A0A-AD05-6FBBAE64F996\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"1.1.0\",\"versionEndExcluding\":\"7.0.9\",\"matchCriteriaId\":\"F0DE96C2-C872-4A19-B50B-5AB66F3AAD63\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.3\",\"matchCriteriaId\":\"2DE32DAA-88FE-4134-84CC-8C071F92D5F3\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.4\",\"versionEndExcluding\":\"6.2.13\",\"matchCriteriaId\":\"2D70ED44-A7DA-4947-99EE-50AB77595E78\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.2\",\"versionEndExcluding\":\"6.4.12\",\"matchCriteriaId\":\"A611B0B5-1CB2-42EA-A100-FE587CA59A09\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortios-6k7k:7.0.5:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"66265BCF-0AA4-4CE2-A096-6F3432EB834E\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"5.0.0\",\"versionEndExcluding\":\"6.2.13\",\"matchCriteriaId\":\"445396AA-14A0-4C3A-BB6D-15F4907B9347\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndExcluding\":\"6.4.12\",\"matchCriteriaId\":\"D4AA72D9-CD66-4628-92B5-6CDFCB8E0EEE\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.10\",\"matchCriteriaId\":\"8EB54D85-8A3B-4F40-A814-3636F2AC99F3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.2.0\",\"versionEndExcluding\":\"7.2.4\",\"matchCriteriaId\":\"7582B2FF-8EDC-4599-96F3-CFA7BAE1FCF5\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.0.12\",\"matchCriteriaId\":\"2EA9BEAE-0403-48E2-A19D-AC27C32DD831\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.0\",\"versionEndExcluding\":\"6.2.11\",\"matchCriteriaId\":\"E5B3B630-5D4D-48AF-978F-5457AE98BBBD\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndExcluding\":\"6.4.12\",\"matchCriteriaId\":\"142A4113-BEF9-4112-AC7D-757A18CFF2CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.5\",\"matchCriteriaId\":\"27A597D3-77FF-4BDA-A2BC-EDFFF96DDEEB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"407755AA-0C23-4C5B-88A2-8BC12A3D268D\"}]}]},{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.0.0\",\"versionEndExcluding\":\"6.0.12\",\"matchCriteriaId\":\"1C8A53DB-C3F6-4945-BE02-BED20AF19BDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.2.0\",\"versionEndExcluding\":\"6.2.11\",\"matchCriteriaId\":\"0C2DDF7D-F910-4016-8C51-4B54AAA8951C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"6.4.0\",\"versionEndExcluding\":\"6.4.12\",\"matchCriteriaId\":\"2B7F56A0-3940-43F1-9B29-45CE29043D36\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"7.0.0\",\"versionEndExcluding\":\"7.0.5\",\"matchCriteriaId\":\"930919B2-1DF9-4216-8245-8C0F3F137C45\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"319D2F9D-E1E5-49C7-8ABD-0A64D7B05D58\"}]}]}],\"references\":[{\"url\":\"https://fortiguard.com/psirt/FG-IR-23-001\",\"source\":\"psirt@fortinet.com\",\"tags\":[\"Vendor Advisory\"]}]}}",
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2023-25610\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-03-24T16:26:39.771566Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-03-24T16:26:45.788Z\"}}], \"cna\": {\"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 9.3, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}}], \"affected\": [{\"cpes\": [], \"vendor\": \"Fortinet\", \"product\": \"FortiSwitchManager\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.1\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:7.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortianalyzer:6.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiAnalyzer\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.11\"}, {\"status\": \"affected\", \"version\": \"6.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.10\"}, {\"status\": \"affected\", \"version\": \"6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.11\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [], \"vendor\": \"Fortinet\", \"product\": \"FortiOS-6K7K\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.0.5\"}, {\"status\": \"affected\", \"version\": \"6.4.10\"}, {\"status\": \"affected\", \"version\": \"6.4.8\"}, {\"status\": \"affected\", \"version\": \"6.4.6\"}, {\"status\": \"affected\", \"version\": \"6.4.2\"}, {\"status\": \"affected\", \"version\": \"6.2.9\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.12\"}, {\"status\": \"affected\", \"version\": \"6.2.6\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.7\"}, {\"status\": \"affected\", \"version\": \"6.2.4\"}, {\"status\": \"affected\", \"version\": \"6.0.12\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.18\"}, {\"status\": \"affected\", \"version\": \"6.0.10\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [], \"vendor\": \"Fortinet\", \"product\": \"FortiProxy\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.2\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.8\"}, {\"status\": \"affected\", \"version\": \"2.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"2.0.14\"}, {\"status\": \"affected\", \"version\": \"1.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.2.13\"}, {\"status\": \"affected\", \"version\": \"1.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"1.1.6\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:fortinet:fortios:7.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:7.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.18:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.17:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.16:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:6.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.6.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.15:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.14:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.13:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.12:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortios:5.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiOS\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.3\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.9\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.11\"}, {\"status\": \"affected\", \"version\": \"6.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.12\"}, {\"status\": \"affected\", \"version\": \"6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.18\"}, {\"status\": \"affected\", \"version\": \"5.6.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.6.14\"}, {\"status\": \"affected\", \"version\": \"5.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.4.13\"}, {\"status\": \"affected\", \"version\": \"5.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.2.15\"}, {\"status\": \"affected\", \"version\": \"5.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"5.0.14\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:2.3:o:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:7.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:7.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:7.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:7.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:7.0.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.4.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.2.0:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.11:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.10:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.9:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.8:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.7:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.6:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.5:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.4:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.3:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.2:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.1:*:*:*:*:*:*:*\", \"cpe:2.3:o:fortinet:fortimanager:6.0.0:*:*:*:*:*:*:*\"], \"vendor\": \"Fortinet\", \"product\": \"FortiManager\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.4\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.11\"}, {\"status\": \"affected\", \"version\": \"6.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.10\"}, {\"status\": \"affected\", \"version\": \"6.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.0.11\"}], \"defaultStatus\": \"unaffected\"}, {\"cpes\": [], \"vendor\": \"Fortinet\", \"product\": \"FortiWeb\", \"versions\": [{\"status\": \"affected\", \"version\": \"7.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.2.1\"}, {\"status\": \"affected\", \"version\": \"7.0.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"7.0.6\"}, {\"status\": \"affected\", \"version\": \"6.4.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.4.2\"}, {\"status\": \"affected\", \"version\": \"6.3.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.3.22\"}, {\"status\": \"affected\", \"version\": \"6.2.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.2.7\"}, {\"status\": \"affected\", \"version\": \"6.1.0\", \"versionType\": \"semver\", \"lessThanOrEqual\": \"6.1.3\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Please upgrade to FortiOS version 7.4.0 or above\\r\\nPlease upgrade to FortiOS version 7.2.4 or above\\r\\nPlease upgrade to FortiOS version 7.0.10 or above\\r\\nPlease upgrade to FortiOS version 6.4.12 or above\\r\\nPlease upgrade to FortiOS version 6.2.13 or above\\r\\nPlease upgrade to FortiWeb version 7.2.2 or above\\r\\nPlease upgrade to FortiWeb version 7.0.7 or above\\r\\nPlease upgrade to FortiWeb version 6.4.3 or above\\r\\nPlease upgrade to FortiWeb version 6.3.23 or above\\r\\nPlease upgrade to FortiWeb version 6.2.8 or above\\r\\nPlease upgrade to FortiWeb version 6.1.4 or above\\r\\nPlease upgrade to upcoming FortiOS version 6.0.17 or above\\r\\nPlease upgrade to FortiSwitchManager version 7.2.2 or above\\r\\nPlease upgrade to FortiSwitchManager version 7.0.2 or above\\r\\nPlease upgrade to FortiProxy version 7.2.3 or above\\r\\nPlease upgrade to FortiProxy version 7.0.9 or above\\r\\nPlease upgrade to FortiManager version 7.2.1 or above\\r\\nPlease upgrade to FortiManager version 7.0.5 or above\\r\\nPlease upgrade to FortiManager version 6.4.12 or above\\r\\nPlease upgrade to FortiManager version 6.2.11 or above\\r\\nPlease upgrade to FortiManager version 6.0.12 or above\\r\\nPlease upgrade to FortiOS-6K7K version 7.0.10 or above\\r\\nPlease upgrade to FortiOS-6K7K version 6.4.12 or above\\r\\nPlease upgrade to FortiOS-6K7K version 6.2.13 or above\\r\\nPlease upgrade to FortiAnalyzer version 7.2.1 or above\\r\\nPlease upgrade to FortiAnalyzer version 7.0.5 or above\\r\\nPlease upgrade to FortiAnalyzer version 6.4.12 or above\\r\\nPlease upgrade to FortiAnalyzer version 6.2.11 or above\\r\\nPlease upgrade to FortiAnalyzer version 6.0.12 or above\\r\\n\\r\\n\\r\\n## Workaround for FortiOS:\\r\\n\\r\\n\\r\\n\\r\\nDisable HTTP/HTTPS administrative interface\\r\\n\\r\\nOR\\r\\n\\r\\nLimit IP addresses that can reach the administrative interface:\\r\\n\\r\\n\\r\\n```\\r\\nconfig firewall address\\r\\nedit my_allowed_addresses\\r\\nset subnet Y IP MY SUBNET\\r\\nend\\r\\n```\\r\\n\\r\\nThen create an Address Group:\\r\\n\\r\\n\\r\\n```\\r\\nconfig firewall addrgrp\\r\\nedit MGMT_IPs\\r\\nset member my_allowed_addresses\\r\\nend\\r\\n```\\r\\n\\r\\nCreate the Local in Policy to restrict access only to the predefined group on management interface (here: port1):\\r\\n\\r\\n\\r\\n```\\r\\nconfig firewall local-in-policy\\r\\nedit 1\\r\\nset intf port1\\r\\nset srcaddr MGMT_IPs\\r\\nset dstaddr all\\r\\nset action accept\\r\\nset service HTTPS HTTP\\r\\nset schedule always\\r\\nset status enable\\r\\nnext\\r\\n\\r\\n\\r\\n\\r\\nedit 2\\r\\nset intf any\\r\\nset srcaddr all\\r\\nset dstaddr all\\r\\nset action deny\\r\\nset service HTTPS HTTP\\r\\nset schedule always\\r\\nset status enable\\r\\nend\\r\\n```\\r\\n\\r\\n\\r\\nIf using non default ports, create appropriate service object for GUI administrative access:\\r\\n\\r\\n```\\r\\nconfig firewall service custom\\r\\nedit GUI_HTTPS\\r\\nset tcp-portrange admin-sport\\r\\nnext\\r\\nedit GUI_HTTP\\r\\nset tcp-portrange admin-port\\r\\nend\\r\\n```\\r\\n\\r\\n\\r\\nUse these objects instead of \\\"HTTPS HTTP\\\" in the local-in policy 1 and 2 below.\\r\\n\\r\\n\\r\\nWhen using an HA reserved management interface, the local in policy needs to be configured slightly differently - please see: \\r\\n\\r\\nhttps://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-configure-a-local-in-policy-on-a-HA/ta-p/222005\\r\\n\\r\\nPlease contact customer support for assistance.\\r\\n\\r\\n\\r\\n## Workaround for FortiManager and FortiAnalyzer:\\r\\n\\r\\n\\r\\nLimit IP addresses that can reach the administrative interface\\r\\n\\r\\n\\r\\n## Workaround for FortiWeb:\\r\\n\\r\\n\\r\\n\\r\\nDisable HTTP/HTTPS administrative interface\\r\\n\\r\\nOR\\r\\n\\r\\nLimit IP addresses that can reach the administrative interface\"}], \"references\": [{\"url\": \"https://fortiguard.com/psirt/FG-IR-23-001\", \"name\": \"https://fortiguard.com/psirt/FG-IR-23-001\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"A buffer underwrite (\u0027buffer underflow\u0027) vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-124\", \"description\": \"Execute unauthorized code or commands\"}]}], \"providerMetadata\": {\"orgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"shortName\": \"fortinet\", \"dateUpdated\": \"2025-03-24T15:39:48.167Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2023-25610\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-03-24T18:42:44.673Z\", \"dateReserved\": \"2023-02-08T13:42:03.367Z\", \"assignerOrgId\": \"6abe59d8-c742-4dff-8ce8-9b0ca1073da8\", \"datePublished\": \"2025-03-24T15:39:48.167Z\", \"assignerShortName\": \"fortinet\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.1"
}
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…