PT-2025-47350 · Fortinet · Fortisandbox

CVE-2025-46215 · Publicado 2025-11-18 · Atualizado 2025-11-19

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiSandbox versions 4.0 all versions Fortinet FortiSandbox versions 4.2 all versions Fortinet FortiSandbox versions 4.4.0 through 4.4.7 Fortinet FortiSandbox versions 5.0.0 through 5.0.1

Description An issue exists in Fortinet FortiSandbox that may allow an unauthenticated attacker to bypass the sandboxing scan process. This can be achieved by submitting a specially crafted file.

Recommendations FortiSandbox versions 4.0: At the moment, there is no information about a newer version that contains a fix for this vulnerability. FortiSandbox versions 4.2: At the moment, there is no information about a newer version that contains a fix for this vulnerability. FortiSandbox versions 4.4.0 through 4.4.7: At the moment, there is no information about a newer version that contains a fix for this vulnerability. FortiSandbox versions 5.0.0 through 5.0.1: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-653

Identificadores relacionados

BDU:2025-14859

CVE-2025-46215

Produtos afetados

Fortisandbox

Referências · 7

• https://t.me/CVEtracker/37628 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2025-46215 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-46215 · Nota de Segurança
• https://fortiguard.fortinet.com/psirt/FG-IR-24-501 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-14859 · Nota de Segurança
• https://twitter.com/CVEnew/status/1991042963024027926 · Publicação no Twitter
• https://twitter.com/VulmonFeeds/status/1990910331049087212 · Publicação no Twitter