PT-2026-2473 · Fortinet · Fortivoice

Publicado 2026-01-13 · Atualizado 2026-01-13 · CVE-2025-58693

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:S/C:N/I:C/A:C

Name of the Vulnerable Software and Affected Versions Fortinet FortiVoice versions 7.0.0 through 7.0.7 Fortinet FortiVoice versions 7.2.0 through 7.2.2

Description A path traversal issue exists in Fortinet FortiVoice. A privileged attacker can delete files from the underlying filesystem by sending specially crafted HTTP or HTTPS requests. The issue stems from insufficient validation of file paths, allowing access to restricted directories.

Recommendations Update Fortinet FortiVoice to a version later than 7.0.7. Update Fortinet FortiVoice to a version later than 7.2.2.

Correção

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2026-05215

CVE-2025-58693

Produtos afetados

Fortivoice

Referências · 5

• https://fortiguard.fortinet.com/psirt/FG-IR-25-778 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2026-05215 · Nota de Segurança
• https://twitter.com/CVEnew/status/2011120641663971480 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-58693 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-58693 · Nota de Segurança