Riskcovery

CVE-2025-57740

State
Published
Severity
6.7 Medium
Published
Oct 14, 2025
Updated
Oct 15, 2026
Reserved
Aug 19, 2025

Read the record on cve.org

Description

An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Cfortinet

Weaknesses

  • CWE-122 Execute unauthorized code or commands

Affected Products

ProductVersions
FortiPAMFortinet
  • 1.5.0Affected
  • 1.4.0 through 1.4.2Affected
  • 1.3.0 through 1.3.1Affected
  • 1.2.0Affected
  • 1.1.0 through 1.1.2Affected
  • 1.0.0 through 1.0.3Affected
FortiProxyFortinet
  • 7.6.0 through 7.6.2Affected
  • 7.4.0 through 7.4.3Affected
  • 7.2.0 through 7.2.15Affected
  • 7.0.0 through 7.0.22Affected
FortiOSFortinet
  • 7.6.0 through 7.6.2Affected
  • 7.4.0 through 7.4.7Affected
  • 7.2.0 through 7.2.10Affected
  • 7.0.0 through 7.0.18Affected
  • 6.4.0 through 6.4.16Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.