Fortinet Products Remote Code Execution Vulnerabilities

Multiple vulnerabilities were identified in Fortinet Products. A remote attacker could exploit some of these vulnerabilities to trigger remote code execution on the targeted system.

Impact

• Remote Code Execution

System / Technologies affected

FortiClientEMS

• FortiClientEMS 7.0 all versions
• FortiClientEMS 7.2.0 through 7.2.10
• FortiClientEMS 7.4.0 through 7.4.1
• FortiClientEMS 7.4.3 through 7.4.4

FortiOS

• FortiOS 6.4.0 through 6.4.16
• FortiOS 7.0.0 through 7.0.17
• FortiOS 7.2.0 through 7.2.11
• FortiOS 7.4.0 through 7.4.8
• FortiOS 7.6.0 through 7.6.3

FortiSwitchManager

• FortiSwitchManager 7.0.0 through 7.0.5
• FortiSwitchManager 7.2.0 through 7.2.6

FortiSASE

• FortiSASE 25.2

Solutions

Before installation of the software, please visit the vendor web-site for more details.

Apply fixes issued by the vendor:

• https://fortiguard.fortinet.com/psirt/FG-IR-25-084
• https://fortiguard.fortinet.com/psirt/FG-IR-25-735

Source link