CVE-2025-53744
7.2HIGHAn incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a
Publicado: 8/12/2025Atualizado: 8/15/2025
Descrição
An incorrect privilege assignment vulnerability [CWE-266] in FortiOS Security Fabric version 7.6.0 through 7.6.2, 7.4.0 through 7.4.7, 7.2 all versions, 7.0 all versions, 6.4 all versions, may allow a remote authenticated attacker with high privileges to escalate their privileges to super-admin via registering the device to a malicious FortiManager.
Análise IADesenvolvido por IA
Produtos Afetados
fortinetfortios
fortinetfortios
Referências
- https://fortiguard.fortinet.com/psirt/FG-IR-25-173Vendor Advisory