CVE-2025-67604

EUVD-2025-209804
A use of potentially dangerous function vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 through 7.4.8, FortiAnalyzer 7.2 all versions, FortiAnalyzer 7.0 all versions, FortiAnalyzer 6.4 all versions, FortiManager 7.6.0 through 7.6.4, FortiManager 7.4.0 through 7.4.8, FortiManager 7.2 all versions, FortiManager 7.0 all versions, FortiManager 6.4 all versions may allow an authenticated attacker to cause a system hang via multiple specially crafted HTTP requests causing crashes. This happens if internal locks are aligned, which is out of control of the attacker.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
fortinetCNA
5.3 MEDIUM
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
fortinetfortianalyzer
7.6.0 ≤
𝑥
≤ 7.6.4
CNA
fortinetfortianalyzer
7.4.0 ≤
𝑥
≤ 7.4.8
CNA
fortinetfortianalyzer
7.2.0 ≤
𝑥
≤ 7.2.12
CNA
fortinetfortianalyzer
7.0.0 ≤
𝑥
≤ 7.0.16
CNA
fortinetfortianalyzer
6.4.0 ≤
𝑥
≤ 6.4.15
CNA
Common Weakness Enumeration
References
https://fortiguard.fortinet.com/psirt/FG-IR-26-137