Critical severity · published May 13, 2025
CVE-2025-32756
Fortinet Multiple Products Stack-Based Buffer Overflow Vulnerability
In wildKEV
9.8
CVSS
30.9%
EPSS
Yes
On KEV
Description
A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)30.9% · higher than 98% of CVEs
Exploited in the wildYes
CISA KEVListed May 14, 2025
Federal remediation dueJun 4, 2025
Ransomware campaign useNot known
Affected products
Which versions
FO
FortiCamera · Fortinet
2.1.0 through 2.1.3; 2.0.0; 1.1.0 through 1.1.5 · source: vendor
FO
FortiMail · Fortinet
7.6.0 through 7.6.2; 7.4.0 through 7.4.4; 7.2.0 through 7.2.7; 7.0.0 through 7.0.8 · source: vendor, NVD
FO
FortiNDR · Fortinet
7.6.0; 7.4.0 through 7.4.7; 7.2.0 through 7.2.4; 7.1.0 through 7.1.1; 7.0.0 through 7.0.6; 1.5.0 through 1.5.3; +4 more · source: vendor, NVD
FO
FortiRecorder · Fortinet
7.2.0 through 7.2.3; 7.0.0 through 7.0.5; 6.4.0 through 6.4.5 · source: vendor, NVD
FO
FortiVoice · Fortinet
7.2.0; 7.0.0 through 7.0.6; 6.4.0 through 6.4.10 · source: vendor, NVD
FF
Forticamera Firmware · Fortinet
2.0.0 through 2.1.3; 1.1.0 through 1.1.5 · source: NVD
MP
Multiple Products · Fortinet
All versions, or not specified · source: KEV