AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2023-25610

CRITICAL · CVSS 9.8 EPSS 18.33%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-03-24 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. It affects Fortinet, FortiOS. Its EPSS score suggests a 18.3% probability of exploitation in the next 30 days. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.

CVE
CVE-2023-25610
Severity
CRITICAL
CVSS
9.8
EPSS
18.33%
Fortinet FortiOS

Original NVD Description

A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.

Related CVEs

Other vulnerabilities affecting the same vendor(s)