CVE-2023-25610
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and...
Affects 12 products across 2 vendors.
A critical buffer underflow vulnerability exists in the administrative interface of multiple versions of Fortinet FortiOS, FortiProxy, and FortiOS-6K7K. This vulnerability allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests, posing significant risks to the operational technology (OT) environment, including potential disruptions to safety systems and network availability.
BSID: BS-2025-GLOBAL-041507-C • Model: Qwen/Qwen2.5-72B-Instruct-AWQ • Confidence: HIGH
Is this CVE in your environment?
BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.
Check My Environment →What is CVE-2023-25610?
What is the CVSS score for CVE-2023-25610?
Is CVE-2023-25610 actively exploited?
How do I remediate CVE-2023-25610?
What systems are affected by CVE-2023-25610?
What NERC-CIP standard applies to CVE-2023-25610?
What IEC 62443 requirement maps to CVE-2023-25610?
| CVE ID | CVE-2023-25610 |
|---|---|
| BSID | BS-2025-GLOBAL-041507-C BreachSpider Global ID |
| CVSS Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| Published | 2025-03-24 |
| Last Modified | 2026-06-17 |
| ICS Relevance | 55% |
| Weakness (CWE) | |
| Verticals | |
| Domains | |
| Source | NVD |
A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.6, version 6.4.0 through 6.4.11 and version 6.2.12 and below, FortiProxy version 7.2.0 through 7.2.2, version 7.0.0 through 7.0.8, version 2.0.12 and below and FortiOS-6K7K version 7.0.5, version 6.4.0 through 6.4.10 and version 6.2.0 through 6.2.10 and below allows a remote unauthenticated attacker to execute arbitrary code or commands via specifically crafted requests.
Source: NIST NVD / MITRE CVE Database
The vulnerability can be exploited by sending specifically crafted requests to the administrative interface of the affected Fortinet products. The attacker does not need to authenticate, making the attack vector highly accessible. The buffer underflow condition can lead to arbitrary code execution, which could result in complete system compromise, data exfiltration, or denial of service.
Exploitation Likelihood: HIGH
| Vendor | Product | Affected Versions |
|---|---|---|
| Fortinet | Fortiswitchmanager | ≥ 7.0.0, ≤ 7.0.1 ≥ 7.2.0, ≤ 7.2.1 |
| Fortinet | Fortiproxy | ≥ 1.1.0, ≤ 1.1.6 ≥ 1.2.0, ≤ 1.2.13 ≥ 2.0.0, ≤ 2.0.14 ≥ 7.0.0, ≤ 7.0.8 ≥ 7.2.0, ≤ 7.2.2 |
| Fortinet | Fortios-6K7K | 6.0.10 6.2.4 6.4.2 6.4.6 6.4.8 6.4.10+4 more7.0.5 ≥ 6.0.12, ≤ 6.0.18 ≥ 6.2.6, ≤ 6.2.7 ≥ 6.2.9, ≤ 6.2.12 |
| Fortinet | Fortios | ≥ 5.0.0, ≤ 5.0.14 ≥ 5.2.0, ≤ 5.2.15 ≥ 5.4.0, ≤ 5.4.13 ≥ 5.6.0, ≤ 5.6.14 ≥ 6.0.0, ≤ 6.0.18 ≥ 6.2.0, ≤ 6.2.12+3 more≥ 6.4.0, ≤ 6.4.11 ≥ 7.0.0, ≤ 7.0.9 ≥ 7.2.0, ≤ 7.2.3 |
| Fortinet | Fortimanager (device & firmware) | 7.2.0 ≥ 6.0.0, ≤ 6.0.11 ≥ 6.2.0, ≤ 6.2.10 ≥ 6.4.0, ≤ 6.4.11 ≥ 7.0.0, ≤ 7.0.4 |
| Fortinet | Fortiweb | ≥ 6.1.0, ≤ 6.1.3 ≥ 6.2.0, ≤ 6.2.7 ≥ 6.3.0, ≤ 6.3.22 ≥ 6.4.0, ≤ 6.4.2 ≥ 7.0.0, ≤ 7.0.6 ≥ 7.2.0, ≤ 7.2.1 |
| Fortinet | Fortiswitch | ≥ 7.0.0, < 7.0.7 ≥ 7.2.0, < 7.2.4 |
| Fortinet | Fortianalyzer (device & firmware) | 7.2.0 ≥ 6.0.0, ≤ 6.0.11 ≥ 6.2.0, ≤ 6.2.10 ≥ 6.4.0, ≤ 6.4.11 ≥ 7.0.0, ≤ 7.0.4 |
| Siemens | Ruggedcom Ape1808 (device & firmware) | All versions |
| CISA known-exploited | Not in KEV catalog |
|---|---|
| Public Exploit | Not confirmed |
| PoC Code | Not confirmed |
Implement strict input validation and length checks on all incoming HTTP requests to the administrative interface. Deploy web application firewalls (WAFs) to filter out suspicious traffic and monitor for anomalous activity.
No reliable network detection signature exists for this vulnerability class — apply the compensating controls above and the vendor patch. A network rule is only drafted when a concrete on-the-wire signature can be grounded in the advisory.
This CVE violates CIP-007-R6 because it allows unauthorized access to the control center's electronic security perimeter, potentially leading to the compromise of critical systems and data.
This CVE maps to SR 7.6 as it involves a vulnerability that can be exploited to gain unauthorized access to the system, which is a critical security requirement for protecting against remote attacks.
Drafted by AI and not validated for your network. Test in an isolated environment before any production deployment. Compensating control only - does not replace vendor patch.
AI Enrichment Record — provenance & audit hash
| Model | Qwen/Qwen2.5-72B-Instruct-AWQ |
|---|---|
| Confidence | HIGH |
| Enriched At | 2026-05-24 |
| SHA-512 Audit Hash | 6a742ecbf61c0e8098c82f3547cf2c92664ca005a09ce24e3e9a4b1b7e80faea752754c2b24a4964c3b57c2c7c89b4fe98123797fc8e448de88142fe7b1f604d |
Critical Severity - Know Your Exposure
A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.
Create a free account →