SecureScout SI

SecureScout SI search demo

Example results for “Is CVE-2025-61624 exploited?”

  1. CISA KEVwww.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2025-61624

    CVE-2025-61624: Fortinet Multiple Products Path Traversal Vulnerability

    FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands. Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes).

  2. NVDnvd.nist.gov/vuln/detail/CVE-2025-61624

    CVE-2025-61624 Detail

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, … FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

  3. FortiGuard PSIRTfortiguard.fortinet.com/psirt/FG-IR-26-122

    Path Traversal in CLI

    An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] in the command line interpreter of FortiOS, FortiPAM, FortiProxy and FortiSwitchManager may allow a privileged attacker to achieve arbitrary write or delete files via specifically crafted arguments to existing commands. … Follow the recommended upgrade path using our tool at: https://docs.fortinet.com/upgrade-tool