Fortinet FortiOS-6k7k vulnerabilities

2 CVEs affecting Fortinet FortiOS-6k7k, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-25610, published 2025-03-24.

More from Fortinet.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-25610, published 2025-03-24. Critical severity, CVSS 9.8. EPSS: 18.3% chance of exploitation in the next 30 days. A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and…
• CVE-2021-42757, published 2021-12-08. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via…