imPC@ndo IT

Tracker / CVE-2025-57740

CVE-2025-57740

High 7.5

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.

Affected products and versions

fortinet fortios · 6.4.0 → 7.2.11
fortinet fortios · 7.4.0 → 7.4.8
fortinet fortios · 7.6.0 → 7.6.3
fortinet fortipam
fortinet fortipam · 1.0.0 → 1.4.3
fortinet fortiproxy · 7.0.0 → 7.4.4
fortinet fortiproxy · 7.6.0 → 7.6.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References