CVE-2025-46775

A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands.

CVSS v3 5.5 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://fortiguard.fortinet.com/psirt/FG-IR-25-259	Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:o:fortinet:fortiextender_firmware::::::::
	cpe:2.3:o:fortinet:fortiextender_firmware::::::::

cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de mensajes de depuración que revelan información innecesaria en Fortinet FortiExtender 7.6.0 a 7.6.1, FortiExtender 7.4.0 a 7.4.6, FortiExtender 7.2 todas las versiones, FortiExtender 7.0 todas las versiones puede permitir a un usuario autenticado obtener credenciales de administrador mediante comandos de registro de depuración.

Information

Published : 2025-11-18 17:16

Updated : 2026-10-18 20:10

NVD link : CVE-2025-46775

Mitre link : CVE-2025-46775

CVE.ORG link : CVE-2025-46775

JSON object : View

Products Affected

fortinet

fortiextender_firmware
fortiextender

CWE

CWE-1295

Debug Messages Revealing Unnecessary Information

{"id": "CVE-2025-46775", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-46775", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-18T18:33:30.741688Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@fortinet.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "affected": [{"source": "psirt@fortinet.com", "affectedData": [{"cpes": ["cpe:2.3:a:fortinet:fortiextender:7.6.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.6.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.6:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.4.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.2.0:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.5:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.4:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.3:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.2:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.1:*:*:*:*:*:*:*", "cpe:2.3:a:fortinet:fortiextender:7.0.0:*:*:*:*:*:*:*"], "vendor": "Fortinet", "product": "FortiExtender", "versions": [{"status": "affected", "version": "7.6.0", "versionType": "semver", "lessThanOrEqual": "7.6.1"}, {"status": "affected", "version": "7.4.0", "versionType": "semver", "lessThanOrEqual": "7.4.6"}, {"status": "affected", "version": "7.2.0", "versionType": "semver", "lessThanOrEqual": "7.2.5"}, {"status": "affected", "version": "7.0.0", "versionType": "semver", "lessThanOrEqual": "7.0.5"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-18T17:16:01.973", "references": [{"url": "https://fortiguard.fortinet.com/psirt/FG-IR-25-259", "tags": ["Vendor Advisory"], "source": "psirt@fortinet.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@fortinet.com", "description": [{"lang": "en", "value": "CWE-1295"}]}], "descriptions": [{"lang": "en", "value": "A debug messages revealing unnecessary information vulnerability in Fortinet FortiExtender 7.6.0 through 7.6.1, FortiExtender 7.4.0 through 7.4.6, FortiExtender 7.2 all versions, FortiExtender 7.0 all versions may allow an authenticated user to obtain administrator credentials via debug log commands."}, {"lang": "es", "value": "Una vulnerabilidad de mensajes de depuraci\u00f3n que revelan informaci\u00f3n innecesaria en Fortinet FortiExtender 7.6.0 a 7.6.1, FortiExtender 7.4.0 a 7.4.6, FortiExtender 7.2 todas las versiones, FortiExtender 7.0 todas las versiones puede permitir a un usuario autenticado obtener credenciales de administrador mediante comandos de registro de depuraci\u00f3n."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D99BE066-31DA-417E-9C7F-73453CE4A69D", "versionEndExcluding": "7.4.8", "versionStartIncluding": "7.0.0"}, {"criteria": "cpe:2.3:o:fortinet:fortiextender_firmware:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F3DA4B8-95C4-407B-B632-D8F48C89511E", "versionEndExcluding": "7.6.3", "versionStartIncluding": "7.6.0"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:fortinet:fortiextender:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "A0617C1D-E321-409D-B54B-775E854A03C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "psirt@fortinet.com"}