CVE-2023-25610Patch(fortinet / fortianalyzer)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch fortinet fortianalyzer systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

fortinet CVEs Back to dashboard

1.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

https://fortiguard.com/psirt/FG-IR-23-001

Weakness type (CWE)

CWE-124

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

fortianalyzer
fortimanager
fortios
fortios-6k7k

Threat summary

Patch or workaround signal is available
1 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Affected systems

Vendors

fortinet

Products

fortianalyzerfortimanagerfortiosfortios-6k7kfortiproxyfortiswitchfortiswitchmanagerfortiweb

2 versions affected across 8 products

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Patch

1100.0%

Referenced assets1 URL

By indicator

https://x.com/pcsdf1/status/2068907604852756502

Full discourse1 post

Ran Geva@rangeva91d
Patch
This FortiBleed vulnerability (CVE-2023-25610) is a critical reminder of supply chain risks. Exploitation before patching can lead to RCE, potentially bypassing firewalls. Urgently verify patches, enable strong MFA on all accounts, and monitor logs for unusual activity. Zero Trust principles are key here. https://x.com/pcsdf1/status/2068907604852756502 #FortiBleed #CyberSecurity
Post summary
The post warns about the FortiBleed CVE’s ability to cause remote code execution, urging rapid patching and additional security controls.
1000090
519 followersView on X

CPE platform detail11 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

11 of 11 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	fortinet	fortianalyzer	-	-	-
App	fortinet	fortianalyzer	7.2.0	-	-
App	fortinet	fortimanager	-	-	-
App	fortinet	fortimanager	7.2.0	-	-
OS	fortinet	fortios	-	-	-
App	fortinet	fortios-6k7k	-	-	-
App	fortinet	fortios-6k7k	7.0.5	-	-
App	fortinet	fortiproxy	-	-	-
OS	fortinet	fortiswitch	-	-	-
App	fortinet	fortiswitchmanager	-	-	-
App	fortinet	fortiweb	-	-	-

Explore more

Back to dashboard fortinet CVEs fortianalyzer vulnerabilities