Fortinet Security Updates – 09 April 2025

The addressed vulnerabilities could allow the attacker to perform denial of service attacks, gain elevated privileges, bypass security restrictions, or execute arbitrary code, and gain access to the affected product.

Sample of the addressed vulnerabilities:

1. FortiSwitch Unverified Password Change Escalation of Privilege Vulnerability (CVE-2024-48887):

• CVSS: 9.3
• Attack Vector: Network
• Attack Complexity: Low
• Privileges Required: None
• User Interaction: None
• Consequences: Gain Privileges

2. Fortinet FortiOS Improper Restriction of Communication Channel to Intended Endpoints Vulnerability (CVE-2024-26013):

• CVSS: 7.1
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: None
• User Interaction: Required
• Consequences: Gain Access

Sample of the affected products:

• FortiOS.
• FortiAnalyzer.
• FortiManager.
• FortiProxy.
• FortiWeb.
• FortiSwitch.
• FortiMail.
• FortiADC.