CVE-2025-57740: Execute unauthorized code or commands in Fortinet FortiPAM
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.
AI Analysis
Technical Summary
This vulnerability is a heap-based buffer overflow (CWE-122) present in Fortinet FortiPAM, FortiOS, and FortiProxy products. It affects FortiPAM versions 1.0.0 through 1.5.0, FortiOS versions 6.4 all versions, 7.0 all versions, 7.2.10 and below, 7.4.7 and below, and 7.6.2 and below, and FortiProxy versions 7.0 all versions, 7.2 all versions, 7.4.3 and below, and 7.6.2 and below. The flaw exists in the handling of RDP bookmark connections and can be exploited by an authenticated user to execute unauthorized code or commands via crafted requests. The CVSS v3.1 base score is 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability. The vulnerability has an official fix available from the vendor.
Potential Impact
Successful exploitation allows an authenticated user to execute unauthorized code or commands on affected Fortinet products, potentially compromising system confidentiality, integrity, and availability. The vulnerability affects multiple major versions of FortiPAM, FortiOS, and FortiProxy, increasing the attack surface for organizations using these products.
Mitigation Recommendations
An official fix is available for this vulnerability. Users should apply the vendor-provided patches to affected FortiPAM, FortiOS, and FortiProxy versions as soon as possible to remediate the issue. Since the vulnerability requires authentication, ensuring strong access controls and monitoring authenticated sessions is also advisable. Patch status is confirmed by the vendor advisory indicating an official fix.
CVE-2025-57740: Execute unauthorized code or commands in Fortinet FortiPAM
Description
An Heap-based Buffer Overflow vulnerability [CWE-122] in FortiOS version 7.6.2 and below, version 7.4.7 and below, version 7.2.10 and below, 7.0 all versions, 6.4 all versions; FortiPAM version 1.5.0, version 1.4.2 and below, 1.3 all versions, 1.2 all versions, 1.1 all versions, 1.0 all versions and FortiProxy version 7.6.2 and below, version 7.4.3 and below, 7.2 all versions, 7.0 all versions RDP bookmark connection may allow an authenticated user to execute unauthorized code via crafted requests.
CVSS v3.1
Score 6.7medium
Affected software
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability is a heap-based buffer overflow (CWE-122) present in Fortinet FortiPAM, FortiOS, and FortiProxy products. It affects FortiPAM versions 1.0.0 through 1.5.0, FortiOS versions 6.4 all versions, 7.0 all versions, 7.2.10 and below, 7.4.7 and below, and 7.6.2 and below, and FortiProxy versions 7.0 all versions, 7.2 all versions, 7.4.3 and below, and 7.6.2 and below. The flaw exists in the handling of RDP bookmark connections and can be exploited by an authenticated user to execute unauthorized code or commands via crafted requests. The CVSS v3.1 base score is 6.7, indicating a medium severity with high impact on confidentiality, integrity, and availability. The vulnerability has an official fix available from the vendor.
Potential Impact
Successful exploitation allows an authenticated user to execute unauthorized code or commands on affected Fortinet products, potentially compromising system confidentiality, integrity, and availability. The vulnerability affects multiple major versions of FortiPAM, FortiOS, and FortiProxy, increasing the attack surface for organizations using these products.
Mitigation Recommendations
An official fix is available for this vulnerability. Users should apply the vendor-provided patches to affected FortiPAM, FortiOS, and FortiProxy versions as soon as possible to remediate the issue. Since the vulnerability requires authentication, ensuring strong access controls and monitoring authenticated sessions is also advisable. Patch status is confirmed by the vendor advisory indicating an official fix.
Technical Details
- Data Version
- 5.1
- Assigner Short Name
- fortinet
- Date Reserved
- 2025-08-19T12:04:48.437Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- official-fix
Threat ID: 68ee6cbb1b3029e3c7e0403b
Added to database: 10/14/2025, 15:31:07 UTC
Last enriched: 08/11/2026, 13:12:38 UTC
Last updated: 09/10/2026, 19:36:51 UTC
Views: 450
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.