CVE-2025-58413CWE-121CWE-787

CVE-2025-58413

High · published November 18, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

⚠️ A seemingly harmless packet could lead to major mischief! This stack-based buffer overflow in Fortinet FortiOS versions 7.0 through 7.6.3 lets attackers slip in unauthorized commands like a cat burglar finding an open window. 😱 Think of it like a crowded elevator—if one person pushes their way in and causes a commotion, the whole elevator can get stuck. Similarly, a malformed packet can disrupt the flow, allowing unauthorized code execution. An attacker could exploit this vulnerability to run nasty code on your system, potentially gaining control over sensitive equipment. While there’s no known exploitation yet, the risk is evident—it's like leaving your back door unlocked; trouble could come knocking at any time!

Put simply

Think of it like a crowded elevator—if one person pushes their way in and causes a commotion, the whole elevator can get stuck. Similarly, a malformed packet can disrupt the flow, allowing unauthorized code execution. This vulnerability occurs in Fortinet FortiOS when handling specially crafted packets, causing a stack overflow that can lead to arbitrary code execution. Versions affected range from 6.0 to 7.6.3, making this an important issue to address quickly.

What to do

An attacker could exploit this vulnerability to run nasty code on your system, potentially gaining control over sensitive equipment. While there’s no known exploitation yet, the risk is evident—it's like leaving your back door unlocked; trouble could come knocking at any time! Update FortiOS to the latest version—7.6.4 or whichever is recommended for your setup. Make sure to monitor and filter incoming traffic to prevent these rogue packets from getting through. Regularly audit your network configurations to stay ahead of any potential issues. You've got this! With these steps, you'll be back in the safety zone in no time. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weaknesses
CWE-121 · Stack-based Buffer Overflow; CWE-787 · Out-of-bounds Write
Published
2025-11-18T22:16Z
Affected products (4)
ProductVersionsFixed in
fortinet/fortios≥ 6.0.0, < 7.4.97.4.9
fortinet/fortios≥ 7.6.0, < 7.6.47.6.4
fortinet/fortisaseall versions—
fortinet/fortisaseall versions—
References (2)
EPSS history
Timeline
  • 18 NOV 17:01Z
    A stack-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2 all versions, FortiOS 7.0 all…
    cvelistv5