CVE-2025-24477

MEDIUM EXPLOITED

Fortinet Fortios < 7.2.12 - Heap Buffer Overflow

Title source: rule
STIX 2.1

Description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.4 through 7.2.12 allows an attacker to escalate its privileges via a specially crafted CLI command

References (1)

Core 1
Core References

Scores

CVSS v3 4.2
EPSS 0.0001
EPSS Percentile 1.2%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

VulnCheck KEV 2025-10-23
CWE
CWE-122
Status published
Products (1)
fortinet/fortios 7.2.4 - 7.2.12
Published Jul 15, 2025
Tracked Since Feb 18, 2026