CVE-2025-25248
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
An Integer Overflow vulnerability exists in FortiOS, FortiProxy, and FortiPAM that may allow an authenticated user to affect the device's SSL-VPN availability via crafted requests.
Risk Assessment
This vulnerability could lead to disruption of SSL-VPN services, impacting organizational operations and access to resources.
Recommendation
It is recommended to upgrade to the latest versions of FortiOS, FortiProxy, and FortiPAM to mitigate the risk associated with this vulnerability.
Original NVD description (English source)
An Integer Overflow or Wraparound vulnerability [CWE-190] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.2 all versions, 6.4 all versions, FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions, 2.0 all versions and FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions SSL-VPN RDP and VNC bookmarks may allow an authenticated user to affect the device SSL-VPN availability via crafted requests.