CVE-2025-25248

published 2025-08-12

CVE-2025-25248: An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all…

Priority P3 39 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C N I N A H

An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

Affected

25 ranges

Vendor	Product	Version range	Fixed in
fortinet	fortios	—	—
fortinet	fortios	>= 6.4.0 < 7.2.11	7.2.11
fortinet	fortios	6.4.0 – 6.4.16	—
fortinet	fortios	7.0.0 – 7.0.17	—
fortinet	fortios	7.2.0 – 7.2.10	—
fortinet	fortios	>= 7.4.0 < 7.4.8	7.4.8
fortinet	fortios	7.4.0 – 7.4.7	—
fortinet	fortios	>= 7.6.0 < 7.6.3	7.6.3
fortinet	fortios	7.6.0 – 7.6.2	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	—	—
fortinet	fortipam	>= 1.0.0 < 1.4.3	1.4.3
fortinet	fortipam	1.0.0 – 1.0.3	—
fortinet	fortipam	1.1.0 – 1.1.2	—
fortinet	fortipam	1.3.0 – 1.3.1	—
fortinet	fortipam	1.4.0 – 1.4.2	—
fortinet	fortiproxy	—	—
fortinet	fortiproxy	>= 2.0.0 < 7.4.4	7.4.4
fortinet	fortiproxy	2.0.0 – 2.0.14	—
fortinet	fortiproxy	7.0.0 – 7.0.21	—
fortinet	fortiproxy	7.2.0 – 7.2.14	—
fortinet	fortiproxy	7.4.0 – 7.4.3	—
fortinet	fortiproxy	>= 7.6.0 < 7.6.3	7.6.3
fortinet	fortiproxy	7.6.0 – 7.6.2	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-190