Vulnerability details

CVE-2025-25249

Actively exploited

Fortinet FortiOSFortinet FortiSwitchManagerSiemens RUGGEDCOM APE1808

CVSS 3.1

7.4High

Official description

A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets

CVSS scores

Score	Version	Source	Vector
7.4High	3.1	CVEProject cvelistV5 (CNA) (fortinet)	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:P/RL:W/RC:C`

Affected products

Vendor	Product	Versions	Source
Fortinet	FortiOS	7.2.4 ≤ v ≤ 7.2.11	CVEProject cvelistV5 (CNA)
Fortinet	FortiOS	7.4.0 ≤ v ≤ 7.4.7	CVEProject cvelistV5 (CNA)
Fortinet	FortiOS	7.6.0 ≤ v ≤ 7.6.2	CVEProject cvelistV5 (CNA)
Fortinet	FortiSwitchManager	7.2.2 ≤ v ≤ 7.2.5	CVEProject cvelistV5 (CNA)
Siemens	RUGGEDCOM APE1808	All	CVEProject cvelistV5 (CNA)

References and advisories

https://fortiguard.fortinet.com/psirt/FG-IR-25-084
https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/ third-party-advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249 government-resource
https://cert-portal.siemens.com/productcert/html/ssa-864900.html

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-01-13
Last updated: 2026-10-15
State: Published
Assigner (CNA): fortinet
Kolun priority: 84 · Critical

CISA KEV catalog

Date added: 2026-09-09
Due date: 2026-09-12
Used in ransomware: Unknown

Exploit prediction (EPSS)

3.74%

Probability of exploitation in 30 days

89.8%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Active
Technical impact: Total

Weaknesses (CWE)

CWE-122
Execute unauthorized code or commands