CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-02-11
Fortinet FortiOS & FortiProxy Security Fabric (CSF) Authentication Bypass to Super-Admin Privilege Escalation (CVE-2025-24472)
[Affected Scope] FortiOS versions 7.0.0 through 7.0.16, and FortiProxy versions 7.0.0 through 7.0.19, 7.2.0 through 7.2.12, with Security Fabric (CSF) enabled
[Impact] A remote unauthenticated attacker with knowledge of upstream and downstream device serial numbers can bypass authentication via crafted CSF proxy requests to gain full super-admin privileges on the downstream device
[Mitigation] Immediately upgrade FortiOS and FortiProxy to the patched versions, or disable the Security Fabric feature and restrict access to the CSF port as a temporary workaround