CVE-2025-64155
CriticalSummary
Fortinet FortiSIEM versions 7.4.0, 7.3.0-7.3.4, 7.1.0-7.1.8, 7.0.0-7.0.4, and 6.7.0-6.7.10 contain an OS command injection vulnerability. An attacker can execute unauthorized code or commands via crafted TCP requests.
Risk Assessment
The vulnerability allows remote command execution on the FortiSIEM server, potentially leading to full system compromise, data theft, or disruption of security monitoring.
Recommendation
Update FortiSIEM to the latest patched version. Restrict access to the service to trusted networks and monitor TCP traffic for anomalies.
Original NVD description (English source)
An improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSIEM 7.4.0, FortiSIEM 7.3.0 through 7.3.4, FortiSIEM 7.1.0 through 7.1.8, FortiSIEM 7.0.0 through 7.0.4, FortiSIEM 6.7.0 through 6.7.10 may allow an attacker to execute unauthorized code or commands via crafted TCP requests.