Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiWeb Stack-Based Buffer Overflow Vulnerability Allowing Arbitrary Code Execution

Vulnerability

A stack-based buffer overflow vulnerability has been identified in Fortinet FortiWeb versions 7.2.0 through 7.2.7, and 7.4.0 through 7.4.1. This vulnerability may allow a privileged user to execute arbitrary code by sending specially crafted CLI commands, provided the user can bypass FortiWeb's stack protections.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code or commands with elevated privileges.

Remediation

Users can upgrade to Fortinet FortiWeb version 7.4.2 or above, or version 7.2.8 or above, depending on their current version.

Added: Sep 1, 2025, 7:22 PM
Updated: Sep 1, 2025, 7:22 PM

Vulnerability Rating

Custom Algorithm
spread
2.2
impact
7.5
exploitability
3.5
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.