Skip to content
NewA calmer, faster ZeroHour
Exploit / PoCcriticalExploited in the wild

Fortinet fixed two critical flaws in FortiFone and FortiSIEM

Security Affairsby @securityaffairs ()2 min read3 · 2 reads
Read at securityaffairs.com
Analyze CVE-2025-64155 with Vani AIImpact, affected versions, exploitation, mitigations and detection
CVEs
CVE-2025-64155CVE-2025-47855
Tags
cve-2025-64155cve-2025-47855exploit

Vulnerabilities mentioned

All
CVEVulnerabilityCVSSEPSSSignalsPublished
CVE-2025-47855
An exposure of sensitive information to an unauthorized actor [CWE-200] vulnerability in Fortinet FortiFone 7.0.0 through 7.0.1, FortiFone 3.0.13 through…
9.8<1%
CVE-2025-64155
Unauthenticated RCE via OS Command Injection in Fortinet FortiSIEM
9.844%PoC

From the original article

2 min read at securityaffairs.com

Fortinet fixed six security flaws, including two critical bugs in FortiFone and FortiSIEM that attackers could exploit without authentication. Fortinet released patches for six vulnerabilities , including two critical flaws in FortiFone and FortiSIEM that could be exploited without authentication to leak configuration data or enable code execution. The first vulnerabilty, tracked as CVE-2025-64155 (CVSS score of 9.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.