CVE-2025-58325
BaseFortify
Publication date: 2025-10-14
Last updated on: 2025-10-14
Assigner: Fortinet, Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| fortinet | fortios | From 7.4.0 (inc) to 7.4.9 (inc) |
| fortinet | fortios | From 7.4.0 (inc) to 7.4.9 (inc) |
| fortinet | fortios | From 7.4.0 (inc) to 7.4.9 (inc) |
| fortinet | fortios | 7.6.0 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-684 | The code does not function according to its published specifications, potentially leading to incorrect usage. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is an Incorrect Provision of Specified Functionality (CWE-684) in FortiOS versions 6.4 through 7.6.0. It allows a local authenticated attacker to execute system commands by using specially crafted CLI commands, potentially leading to unauthorized control over the system.
How can this vulnerability impact me? :
The vulnerability can allow a local authenticated attacker to execute arbitrary system commands, which can lead to full compromise of the affected system. This includes potential unauthorized access, data manipulation, disruption of services, and other severe impacts on confidentiality, integrity, and availability.