جزئیات آسیب‌پذیری
CVE-2025-25256
شرح رسمی (انگلیسی)
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] vulnerability in Fortinet FortiSIEM 7.3.0 through 7.3.1, FortiSIEM 7.2.0 through 7.2.5, FortiSIEM 7.1.0 through 7.1.7, FortiSIEM 7.0.0 through 7.0.3, FortiSIEM 6.7.0 through 6.7.9, FortiSIEM 6.6 all versions, FortiSIEM 6.5 all versions, FortiSIEM 6.4 all versions, FortiSIEM 6.3 all versions, FortiSIEM 6.2 all versions, FortiSIEM 6.1 all versions, FortiSIEM 5.4 all versions, FortiSIEM 5.3 all versions, FortiSIEM 5.2 all versions, FortiSIEM 5.1 all versions, FortiSIEM 5.0 all versions, FortiSIEM 4.10 all versions, FortiSIEM 4.9 all versions, FortiSIEM 4.7 all versions allows an unauthenticated attacker to execute unauthorized code or commands via crafted CLI requests.
امتیازهای CVSS
| امتیاز | نسخه | منبع | بردار |
|---|---|---|---|
| 9.8بحرانی | 3.1 | CVEProject cvelistV5 (CNA) (fortinet) | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C |
محصولات آسیب‌پذیر
| فروشنده | محصول | نسخه‌ها | منبع |
|---|---|---|---|
| Fortinet | FortiSIEM | 4.10.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 4.7.2 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 4.9.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.4.0 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.0.0 ≤ v ≤ 5.0.1 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.1.0 ≤ v ≤ 5.1.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.2.1 ≤ v ≤ 5.2.2 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.2.5 ≤ v ≤ 5.2.8 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 5.3.0 ≤ v ≤ 5.3.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.1.0 ≤ v ≤ 6.1.2 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.2.0 ≤ v ≤ 6.2.1 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.3.0 ≤ v ≤ 6.3.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.4.0 ≤ v ≤ 6.4.4 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.5.0 ≤ v ≤ 6.5.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.6.0 ≤ v ≤ 6.6.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 6.7.0 ≤ v ≤ 6.7.9 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 7.0.0 ≤ v ≤ 7.0.3 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 7.1.0 ≤ v ≤ 7.1.7 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 7.2.0 ≤ v ≤ 7.2.5 | CVEProject cvelistV5 (CNA) |
| Fortinet | FortiSIEM | 7.3.0 ≤ v ≤ 7.3.1 | CVEProject cvelistV5 (CNA) |
منابع و راهنماها
۴- https://fortiguard.fortinet.com/psirt/FG-IR-25-152
- https://github.com/watchtowrlabs/watchTowr-vs-FortiSIEM-CVE-2025-25256 exploit
- https://labs.watchtowr.com/should-security-solutions-be-secure-maybe-were-all-wrong-fortinet-fortisiem-pre-auth-command-injection-cve-2025-25256/ technical-description
- https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/
اطلاعات
- تاریخ انتشار
- ۱۴۰۴/۰۵/۲۱
- آخرین به‌روزرسانی
- ۱۴۰۵/۰۵/۲۸
- وضعیت
- منتشرشده
- صادرکننده (CNA)
- fortinet
پیش‌بینی بهره‌برداری (EPSS)
ارزیابی SSVC (CISA)
- قابل خودکارسازی
- بله
- وضعیت بهره‌برداری
- اثبات مفهوم
- اثر فنی
- کامل
ضعف‌ها (CWE)
- CWE-78Escalation of privilege