AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-25248

MEDIUM · CVSS 5.3 EPSS 0.45%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-08-12 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.3. It affects FortiOS. Exploitation may require the attacker to be authenticated.

CVE
CVE-2025-25248
Severity
MEDIUM
CVSS
5.3
EPSS
0.45%
FortiOS

Original NVD Description

AnĀ Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.

Related CVEs

Other vulnerabilities affecting the same vendor(s)