Vulnerabilità · 235 giorni fa

FortiOS permette bypass dei log e accesso a reti protette

Siemens ProductCERT segnala due vulnerabilità in FortiOS: CVE-2025-55018 e CVE-2025-62439. CVE-2025-55018 permette HTTP request smuggling che può eludere il logging del firewall. CVE-2025-62439 permette a utenti autenticati con conoscenza FSSO accesso non autorizzato a risorse protette.

Cronologia

• 10 mar Segnalato da Siemens ProductCERT

Fonti

1 fonte che coprono questa storia

• Siemens ProductCERT 10 mar

  SSA-027652

  As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.

• Siemens ProductCERT 10 mar

  SSA-770770

  Siemens has identified the following specific mitigations that customers can apply to reduce the risk: Product-specific remediations or mitigations can be found in the section Known Affected Products.

• Siemens ProductCERT 10 mar

  SSA-975644

  As a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms.

• Siemens ProductCERT 10 mar

  SSA-452276

  Siemens has identified the following specific mitigations that customers can apply to reduce the risk: Product-specific remediations or mitigations can be found in the section Known Affected Products.

Entità

• CVE-2025-55018
• CVE-2025-62439

Riepilogo fornitore: Fortinet

Part of the PlainSec briefing for 2026-03-10

Editions

• Briefing for 2026-03-10

Storie correlate

• UAT-8616 sfrutta zero‑day in Cisco Catalyst SD‑WAN Controller
• Nuove RCE di terze parti compromettono ambienti cloud
• Patch di marzo: correzione di vulnerabilità cloud critiche