← Database

CVE-2025-47295

LOW CVSS: 3.7 Published: 2025-05-28 Modified: 2026-06-17

Description

A buffer over-read in Fortinet FortiOS versions 7.4.0 through 7.4.3, versions 7.2.0 through 7.2.7, and versions 7.0.0 through 7.0.14 may allow a remote unauthenticated attacker to crash the FGFM daemon via a specially crafted request, under rare conditions that are outside of the attacker's control.

Affected Platforms

Fortinet Fortios

Weakness Type

CWE-126, CWE-125

References