CVE-2025-54838

6.8MEDIUM

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

게시됨: 12/9/2025업데이트됨: 12/9/2025
NVD에서 보기MITRE에서 보기

설명

An Incorrect Authorization vulnerability [CWE-863] in FortiPortal 7.4.0 through 7.4.5 may allow an authenticated attacker to reboot a shared FortiGate device via crafted HTTP requests.

AI 분석AI 기반

영향받는 제품

fortinetfortiportal

참조