This vulnerability is a stack-based buffer overflow in Fortinet FortiOS and FortiSASE 25.3.b that allows remote attackers to execute unauthorized code or commands via specially crafted packets. It affects multiple major versions of FortiOS, including all versions of 6.0, 6.2, 6.4, 7.0, and 7.2, as well as specific versions 7.4.0 through 7.4.8 and 7.6.0 through 7.6.3. The vulnerability has a CVSS 3.1 base score of 6.9 with attack vector as adjacent network, high attack complexity, no privileges required, no user interaction, and impacts confidentiality, integrity, and availability. The vendor has assigned a remediation level of workaround, indicating no official patch is yet available but mitigations may exist.

Successful exploitation can lead to execution of unauthorized code or commands on affected FortiOS devices, potentially compromising confidentiality, integrity, and availability of the system. This could allow attackers to gain control over the device or disrupt its operations. However, no active exploitation has been reported so far.

Currently, no official patch is available for this vulnerability. The vendor has assigned a remediation level of workaround, so users should consult Fortinet's official advisories for recommended workarounds to mitigate risk. Monitor vendor communications for updates on official fixes and apply them promptly once released.