PT-2025-5627 · Fortinet · Fortigate+2

Published 2025-01-15 · Updated 2025-08-21 · CVE-2025-55591

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiOS (affected versions not specified) FortiProxy (affected versions not specified)

Description: A weakness in the web-based management interfaces of Fortinet Fortigate firewall devices allows attackers to gain administrator access to the firewall.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

BDU:2025-10001

CVE-2025-55591

Affected Products

Fortios

Fortiproxy

Fortigate

References · 9

• 🔥 https://github.com/goldenGlow21/softwares_PoC/blob/main/A3002R_V4/Boa%20-%20Command%20Injection/PoC%202.md · Exploit
• https://bdu.fstec.ru/vul/2025-10001 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-55591 · Security Note
• https://osv.dev/vulnerability/CVE-2025-55591 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1957546842859655537 · Twitter Post
• https://twitter.com/CVEnew/status/1957528341650509896 · Twitter Post
• https://twitter.com/SecAideInfo/status/1958472956365222064 · Twitter Post
• https://t.me/CVEtracker/30310 · Telegram Post
• https://twitter.com/CERTJersey/status/1879520256516874676 · Twitter Post