CVE-2025-54820

A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-26-098	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:fortinet:fortimanager::::::::
	cpe:2.3:a:fortinet:fortimanager::::::::

History

12 Mar 2026, 21:17

Type	Values Removed	Values Added
First Time		Fortinet fortimanager Fortinet
Summary		(es) Una vulnerabilidad de desbordamiento de búfer basado en pila [CWE-121] vulnerabilidad en Fortinet FortiManager 7.4.0 hasta 7.4.2, FortiManager 7.2.0 hasta 7.2.10, FortiManager 6.4 todas las versiones puede permitir a un atacante remoto no autenticado ejecutar comandos no autorizados a través de solicitudes manipuladas, si el servicio está habilitado. El éxito del ataque depende de la capacidad para eludir los mecanismos de protección de pila.
References	~~() https://fortiguard.fortinet.com/psirt/FG-IR-26-098 -~~	() https://fortiguard.fortinet.com/psirt/FG-IR-26-098 - Vendor Advisory
CPE		cpe:2.3:a:fortinet:fortimanager::::::::
CWE		CWE-787

10 Mar 2026, 18:17

Type	Values Removed	Values Added
New CVE

Information

Published : 2026-03-10 18:17

Updated : 2026-03-12 21:17

NVD link : CVE-2025-54820

Mitre link : CVE-2025-54820

CVE.ORG link : CVE-2025-54820

JSON object : View

Products Affected

fortinet

fortimanager

CWE

CWE-121

Stack-based Buffer Overflow

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-54820", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2026-03-10T18:17:58.363", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-26-098", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-121"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms."}, {"lang": "es", "value": "Una vulnerabilidad de desbordamiento de b\u00fafer basado en pila [CWE-121] vulnerabilidad en Fortinet FortiManager 7.4.0 hasta 7.4.2, FortiManager 7.2.0 hasta 7.2.10, FortiManager 6.4 todas las versiones puede permitir a un atacante remoto no autenticado ejecutar comandos no autorizados a trav\u00e9s de solicitudes manipuladas, si el servicio est\u00e1 habilitado. El \u00e9xito del ataque depende de la capacidad para eludir los mecanismos de protecci\u00f3n de pila."}], "lastModified": "2026-03-12T21:17:31.313", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8D032DF6-3C57-4EB8-8B65-CB3330FB2440", "versionEndExcluding": "7.2.11", "versionStartIncluding": "6.4.0"}, {"criteria": "cpe:2.3:a:fortinet:fortimanager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4490512-36ED-4212-9D34-D74739A56E84", "versionEndExcluding": "7.4.3", "versionStartIncluding": "7.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@fortinet.com"}