Fortinet Products Elevation of Privilege Vulnerability
Release Date: 20 Oct 2026
A vulnerability was identified in Fortinet Products. A
remote attacker could exploit this vulnerability to trigger elevation of
privilege, security restriction bypass and data manipulation on the targeted
system.
Note:
CVE-2025-61624 is being exploited in the wild. An
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
in the command line interpreter of FortiOS, FortiPAM, FortiProxy and
FortiSwitchManager may allow a privileged attacker to achieve arbitrary write
or delete files via specifically crafted arguments to existing
commands. Hence, the risk level is rated as Medium Risk.
Impact
- Security
Restriction Bypass
- Data
Manipulation
- Elevation
of Privilege
System / Technologies affected
FortiOS
- FortiOS
6.4 all versions
- FortiOS
7.0 all versions
- FortiOS
7.2 all versions
- FortiOS
7.4.0 through 7.4.9
- FortiOS
7.6.0 through 7.6.4
FortiPAM
- FortiPAM
1.0 all versions
- FortiPAM
1.1 all versions
- FortiPAM
1.2 all versions
- FortiPAM
1.3 all versions
- FortiPAM
1.4 all versions
- FortiPAM
1.5 all versions
- FortiPAM
1.6 all versions
- FortiPAM
1.7.0
FortiProxy
- FortiProxy
7.0 all versions
- FortiProxy
7.2 all versions
- FortiProxy
7.4.0 through 7.4.11
- FortiProxy
7.6.0 through 7.6.4
FortiSwitchManager
- FortiSwitchManager
7.0.0 through 7.0.6
- FortiSwitchManager
7.2.0 through 7.2.7
Solutions
Before installation of the software, please visit the
vendor web-site for more details.
Apply fixes issued by the vendor:
Vulnerability Identifier
Source
Related Link
- https://fortiguard.fortinet.com/psirt/FG-IR-26-122
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search=CVE-2025-61624&field_date_added_wrapper=all&field_cve=&sort_by=field_date_added&items_per_page=20&url=
沒有留言:
發佈留言