Remote arbitrary code execution affecting FortiOS and FortiSwitchManager
A high vulnerability affecting FortiOS and FortiSwitchManager would allow an unauthenticated attacker to execute unauthorized code or commands on affected systems.
Description
Technical context and vulnerability details
FortiOS is the operating system for Fortinet's FortiGate firewalls, while FortiSwitchManager is a centralized management solution for FortiSwitch switches. These products are affected by a vulnerability labeled CVE-2025-25249 resulting from a heap-based buffer overflow. Exploitation of this vulnerability would allow an unauthenticated attacker to execute unauthorized code or commands on affected systems via sending specially crafted packets. It is classified high with a severity score of 8.1 according to CVSS V3.1.
Potential Risks & Impact
Potential consequences upon exploitation
- remote arbitrary code execution;
- compromised system integrity;
- breach of data confidentiality;
- denial of service (DoS);
Affected systems
Products, components and targeted versions
- FortiOS version(s) 7.6.0 to 7.6.3;
- FortiOS version(s) 7.4.0 to 7.4.8;
- FortiOS version(s) 7.2.0 to 7.2.11;
- FortiOS version(s) 7.0.0 to 7.0.17;
- all versions of FortiOS 6.4;
- FortiSwitchManager version(s) 7.2.0 to 7.2.6;
- FortiSwitchManager version(s) 7.0.0 to 7.0.5;
Recommended Remediations & Actions
Immediate actions and recommended mitigations
- Update FortiOS to version 7.6.6 (for 7.6.x versions), 7.4.9 (for 7.4.x versions), 7.2.12 (for 7.2.x versions), 7.0.18 (for 7.0.x versions) or later;
- Update FortiOS 6.4 to a patched version from a higher branch;
- Update FortiSwitchManager to version 7.2.7 (for 7.2.x versions), 7.0.6 (for 7.0.x versions) or later;
Sources & External Links
Vendor security advisories and documentation
- https://fortiguard.fortinet.com/psirt/FG-IR-25-084
- https://cert-portal.siemens.com/productcert/html/ssa-864900.html
- https://socradar.io/blog/cve-2025-25249-pivotc2-fortigate-rat/
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249
- https://nvd.nist.gov/vuln/detail/CVE-2025-25249
Advisory Specifications
CSIRT Emergency Response
Is your organization affected or do you suspect an incident? Our security experts are available to assist.
Report an incidentGet our alerts by email
Subscribe to receive our security alert bulletins and Iservices news straight to your inbox.