HIGH Actively exploited Used in ransomware CWE-288
CVE-2025-24472
Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
Fortinet·FortiOS and FortiProxy
8.1/ 10
CVSS 3.1
High severity
7.2%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 94% of all CVEs
Listed
CISA KEV catalog
- Added
- Mar 18, 2025
- Fix due
- Apr 8, 2025
- Ransomware
- Known use
Timeline
- Published
- Feb 11, 2025
- Updated
- Aug 5, 2026
- First covered
- Aug 12, 2026
- Latest story
- 3 months ago
Summary
An Authentication Bypass Using an Alternate Path or Channel vulnerability [CWE-288] affecting FortiOS 7.0.0 through 7.0.16 and FortiProxy 7.2.0 through 7.2.12, 7.0.0 through 7.0.19 may allow a remote unauthenticated attacker with prior knowledge of upstream and downstream devices serial numbers to gain super-admin privileges on the downstream device, if the Security Fabric is enabled, via crafted CSF proxy requests.
CWE-288Execute unauthorized code or commands
Attack profile
Attack vectorNetwork
ComplexityHigh
PrivilegesNone
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:CCISA required action
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Affected products
- Fortinet FortiOS7.0.0 to 7.0.16
- Fortinet FortiProxy7.2.0 to 7.2.127.0.0 to 7.0.19