Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2025-32756

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMa

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
fortinet

Description

A stack-based buffer overflow vulnerability [CWE-121] vulnerability in Fortinet FortiCamera 2.1.0 through 2.1.3, FortiCamera 2.0 all versions, FortiCamera 1.1 all versions, FortiMail 7.6.0 through 7.6.2, FortiMail 7.4.0 through 7.4.4, FortiMail 7.2.0 through 7.2.7, FortiMail 7.0.0 through 7.0.8, FortiNDR 7.6.0, FortiNDR 7.4.0 through 7.4.7, FortiNDR 7.2.0 through 7.2.4, FortiNDR 7.0.0 through 7.0.6, FortiRecorder 7.2.0 through 7.2.3, FortiRecorder 7.0.0 through 7.0.5, FortiRecorder 6.4.0 through 6.4.5, FortiVoice 7.2.0, FortiVoice 7.0.0 through 7.0.6, FortiVoice 6.4.0 through 6.4.10 allows a remote unauthenticated attacker to execute arbitrary code or commands via sending HTTP requests with specially crafted hash cookie.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Fortinet FortiNDR

Default version status: unaffected

  • 7.6.0affected
  • 7.4.0 to ≤ 7.4.7affected
  • 7.2.0 to ≤ 7.2.4affected
  • 7.1.0 to ≤ 7.1.1affected
  • 7.0.0 to ≤ 7.0.6affected
  • 1.5.0 to ≤ 1.5.3affected
  • 1.4.0affected
  • 1.3.0 to ≤ 1.3.1affected
  • 1.2.0affected
  • 1.1.0affected

Fortinet FortiCamera

Default version status: unaffected

  • 2.1.0 to ≤ 2.1.3affected
  • 2.0.0affected
  • 1.1.0 to ≤ 1.1.5affected

Fortinet FortiRecorder

Default version status: unaffected

  • 7.2.0 to ≤ 7.2.3affected
  • 7.0.0 to ≤ 7.0.5affected
  • 6.4.0 to ≤ 6.4.5affected

Fortinet FortiVoice

Default version status: unaffected

  • 7.2.0affected
  • 7.0.0 to ≤ 7.0.6affected
  • 6.4.0 to ≤ 6.4.10affected

Fortinet FortiMail

Default version status: unaffected

  • 7.6.0 to ≤ 7.6.2affected
  • 7.4.0 to ≤ 7.4.4affected
  • 7.2.0 to ≤ 7.2.7affected
  • 7.0.0 to ≤ 7.0.8affected

References