CVE-2025-58325

Published Oct 14, 2025

Last updated 7 days ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-58325 is a vulnerability in Fortinet's FortiOS that stems from an "Incorrect Provision of Specified Functionality". This flaw, classified as CWE-684, resides in the CLI command processing logic. The vulnerability allows a local, authenticated attacker to execute system commands by crafting specific CLI commands that bypass intended restrictions. The vulnerability exists because certain hidden or undocumented CLI command options are not properly restricted. An attacker with valid CLI access can exploit this by issuing specially crafted commands, leading to privilege escalation and potential full system compromise. Exploitation requires local access and no user interaction. The affected platforms include high-end FortiGate models such as the 100E/101E series up to the 7000F.

Description: An Incorrect Provision of Specified Functionality vulnerability [CWE-684] in FortiOS 7.6.0, 7.4.0 through 7.4.5, 7.2.5 through 7.2.10, 7.0.0 through 7.0.15, 6.4 all versions may allow a local authenticated attacker to execute system commands via crafted CLI commands.
Source: psirt@fortinet.com
NVD status: Analyzed
Products: fortios

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.7
Impact score: 5.9
Exploitability score: 0.8
Vector string: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: MEDIUM

Weaknesses

psirt@fortinet.com: CWE-684

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA0532A5-31F2-4A92-BF31-6003E28AC948",
            "versionEndExcluding": "7.0.16",
            "versionStartIncluding": "6.4.0"
          },
          {
            "criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4386465B-EFF9-41BA-B393-82135A2591DE",
            "versionEndExcluding": "7.2.11",
            "versionStartIncluding": "7.2.0"
          },
          {
            "criteria": "cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "199954FD-1280-46F8-8515-7591CE75A1E5",
            "versionEndExcluding": "7.4.6",
            "versionStartIncluding": "7.4.0"
          },
          {
            "criteria": "cpe:2.3:o:fortinet:fortios:7.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "44CE8EE3-D64A-49C8-87D7-C18B302F864A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.