Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiOS and FortiProxy Incomplete Cleanup Vulnerability Allowing Unauthorized SSH Key Injection

Vulnerability

A vulnerability allowing incomplete cleanup has been identified in Fortinet FortiOS versions 7.2 all versions and prior, as well as FortiProxy versions 7.2.0 through 7.2.2 and prior to 7.0.8. This vulnerability allows a VDOM privileged attacker to silently add SSH key files to the system by sending crafted CLI requests.

Impact

Exploitation of this vulnerability could lead to unauthorized SSH key injection, allowing for potential unauthorized access to the system via SSH.

Added: Jun 10, 2025, 5:19 PM
Updated: Jun 10, 2025, 5:19 PM

Vulnerability Rating

Custom Algorithm
spread
6.8
impact
2.5
exploitability
4.9
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.