CyberRota Analysis
This is a low severity vulnerability with a CVSS score of 3.1. It affects FortiOS. Exploitation may require the attacker to be authenticated.
CVE
CVE-2025-22251
Severity
LOW
CVSS
3.1
EPSS
0.34%
FortiOS
Original NVD Description
An improper restriction of communication channel to intended endpoints vulnerability [CWE-923] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2 all versions, 7.0 all versions, 6.4 all versions may allow an unauthenticated attacker to inject unauthorized sessions via crafted FGSP session synchronization packets.
Related CVEs
Other vulnerabilities affecting the same vendor(s)