Fortinet SIEM issue coincides with spike in brute
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-48788 | Unauthenticated SQL Injection in Fortinet FortiClient EMS | 9.8 | 98% | KEVRansomware | KEV |
| CVE-2024-47575 | Unauthenticated RCE in Fortinet FortiManager and FortiManager Cloud | 9.8 | 95% | KEVPoC | KEV |
| CVE-2025-25256 | Unauthenticated OS command injection in Fortinet FortiSIEM (CVE-2025-25256) | 9.8 | 60% |
From the original article
4 min read at cyberscoop.com
Researchers aren’t aware of any active exploitation of the software, but the issue is being dealt with simultaneously as attackers are trying to brute force the company’s security appliances. Fortinet office in Burnaby, BC, Canada, July 7, 2023.
By @CyberScoopNews · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.