Description
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Fortinet FortiOS
Default version status: unaffected
7.6.0 to ≤ 7.6.4affected7.4.0 to ≤ 7.4.9affected7.2.0 to ≤ 7.2.13affected7.0.0 to ≤ 7.0.19affected6.4.0 to ≤ 6.4.16affected
Fortinet FortiProxy
Default version status: unaffected
7.6.0 to ≤ 7.6.4affected7.4.0 to ≤ 7.4.11affected7.2.0 to ≤ 7.2.16affected7.0.0 to ≤ 7.0.23affected
Fortinet FortiSwitchManager
Default version status: unaffected
7.2.0 to ≤ 7.2.7affected7.0.0 to ≤ 7.0.6affected
Fortinet FortiPAM
Default version status: unaffected
1.7.0affected1.6.0 to ≤ 1.6.2affected1.5.0 to ≤ 1.5.1affected1.4.0 to ≤ 1.4.3affected1.3.0 to ≤ 1.3.1affected1.2.0affected1.1.0 to ≤ 1.1.2affected1.0.0 to ≤ 1.0.3affected
References
- https://fortiguard.fortinet.com/psirt/FG-IR-26-122 ↗
- https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 ↗
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 ↗
- https://cert-portal.siemens.com/productcert/html/ssa-975644.html ↗