CVE-2023-25610
CVE-2023-25610 is a critical-severity vulnerability in Fortinet Fortiweb with a CVSS 3.x base score of 9.8. Its EPSS exploit-prediction score of 18% places it in the 97th percentile, indicating an elevated likelihood of exploitation. The underlying weakness is classified as CWE-124.
Key facts
- Severity: Critical (CVSS 3.x base score 9.8)
- EPSS exploit prediction: 18% (97th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2023-29551
- Weakness: CWE-124
- Affected product: Fortinet Fortiweb
- Published:
- Last modified:
Description
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Frequently asked questions
- What is CVE-2023-25610?
- A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
- How severe is CVE-2023-25610?
- CVE-2023-25610 has a CVSS 3.x base score of 9.8, rated critical severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is high, integrity high, and availability high.
- Is CVE-2023-25610 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 18% (97th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-25610?
- CVE-2023-25610 primarily affects Fortinet Fortiweb. In total, 11 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2023-25610?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.
- Does CVE-2023-25610 have an EU (EUVD) identifier?
- Yes. CVE-2023-25610 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2023-29551.
- When was CVE-2023-25610 published?
- CVE-2023-25610 was published on 2025-03-24 and last updated on 2026-06-17.
References
Affected products (11)
- cpe:2.3:a:fortinet:fortiweb:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortiswitch:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortios-6k7k:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortios-6k7k:7.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortimanager:7.2.0:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortianalyzer:*:*:*:*:*:*:*:*
- cpe:2.3:a:fortinet:fortianalyzer:7.2.0:*:*:*:*:*:*:*
More vulnerabilities in Fortinet Fortiweb
- CVE-2026-24858 — Critical (CVSS 9.8): An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] vulnerability in Fortinet…
- CVE-2025-59719 — Critical (CVSS 9.8): An improper verification of cryptographic signature vulnerability in Fortinet FortiWeb 8.0.0, FortiWeb 7.6.0 through…
- CVE-2025-64446 — Critical (CVSS 9.8): A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.1, FortiWeb 7.6.0 through 7.6.4,…
- CVE-2025-25257 — Critical (CVSS 9.8): An improper neutralization of special elements used in an SQL command ('SQL Injection') vulnerability [CWE-89]…
- CVE-2021-42756 — Critical (CVSS 9.8): Multiple stack-based buffer overflow vulnerabilities [CWE-121] in the proxy daemon of FortiWeb 5.x all versions,…
- CVE-2020-29016 — Critical (CVSS 9.8): A stack-based buffer overflow vulnerability in FortiWeb 6.3.0 through 6.3.5 and version before 6.2.4 may allow an…
All CVEs affecting Fortinet Fortiweb →
Other CWE-124 vulnerabilities
- CVE-2026-44631 — Critical (CVSS 9.8): Buffer Underwrite vulnerability in Apache HTTP Server on crafted regular expressions in the configuration. This issue…
- CVE-2025-27440 — High (CVSS 8.5): Heap overflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via…
- CVE-2025-27439 — High (CVSS 8.5): Buffer underflow in some Zoom Workplace Apps may allow an authenticated user to conduct an escalation of privilege via…
- CVE-2026-34253 — High (CVSS 8.2): A buffer underflow vulnerability has been identified in the ogg123 utility from the vorbis-tools 1.4.3 package in…
- CVE-2026-0966 — High (CVSS 8.2): A flaw was found in libssh. The API function `ssh_get_hexa()` is vulnerable to a denial of service when processing…
- CVE-2025-62786 — High (CVSS 8.1): Wazuh is a free and open source platform used for threat prevention, detection, and response. A heap-based…