Volerion logoVolerion
Volerion logoVolerion

Fortinet FortiOS Improper Restriction of Communication Channel Vulnerability Allowing Session Injection

Vulnerability

A vulnerability exists in Fortinet FortiOS versions 7.6.0, 7.4.0 through 7.4.5, 7.2 (all versions), 7.0 (all versions), and 6.4 (all versions). This vulnerability involves an improper restriction of communication channels to intended endpoints, which may allow an unauthenticated attacker to inject unauthorized sessions. The issue arises through crafted FGSP session synchronization packets.

Impact

Exploitation of this vulnerability could lead to unauthorized session injection, allowing attackers to potentially hijack or manipulate sessions.

Added: Jun 10, 2025, 6:35 PM
Updated: Jun 10, 2025, 6:35 PM

Vulnerability Rating

Custom Algorithm
spread
6.8
impact
1.3
exploitability
7.0
remediation
0.0
relevance
0.2
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.