vulnerability

Fortinet FortiOS: Out-of-bounds Read (CVE-2025-47295)

Severity
4
CVSS
(AV:N/AC:M/Au:N/C:N/I:N/A:P)
Published
May 28, 2025
Added
Jun 6, 2025
Modified
Aug 11, 2025

Description

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.

Solutions

fortios-upgrade-7_0_15fortios-upgrade-7_2_8fortios-upgrade-7_4_4
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.