CVE-2025-61624

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-61624
An Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4.0 through 7.4.9, FortiOS 7.2 all versions, FortiOS 7.0 all versions, FortiOS 6.4 all versions, FortiPAM 1.7.0, FortiPAM 1.6 all versions, FortiPAM 1.5 all versions, FortiPAM 1.4 all versions, FortiPAM 1.3 all versions, FortiPAM 1.2 all versions, FortiPAM 1.1 all versions, FortiPAM 1.0 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4.0 through 7.4.11, FortiProxy 7.2 all versions, FortiProxy 7.0 all versions, FortiSwitchManager 7.2.0 through 7.2.7, FortiSwitchManager 7.0.0 through 7.0.6 may allow an authenticated attacker with admin profile and at least read-write permissions to write or delete arbitrary files via specific CLI commands.

6.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.8 / Impact : 5.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-26-122 Vendor Advisory
https://cert-portal.siemens.com/productcert/html/ssa-975644.html Third Party Advisory
https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 Third Party Advisory
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 US Government Resource
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*
cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:o:fortinet:fortipam:*:*:*:*:*:*:*:*

Configuration 3 (hide)

OR cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiproxy:*:*:*:*:*:*:*:*

Configuration 4 (hide)

OR cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*
cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*
History

16 Oct 2026, 19:11

Type Values Removed Values Added
First Time Siemens
Siemens ruggedcom Ape1808
Siemens ruggedcom Ape1808 Firmware
References () https://cert-portal.siemens.com/productcert/html/ssa-975644.html - () https://cert-portal.siemens.com/productcert/html/ssa-975644.html - Third Party Advisory
References () https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 - () https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 - Third Party Advisory
References () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 - () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 - US Government Resource
CPE cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*

16 Oct 2026, 18:17

Type Values Removed Values Added
References
  • () https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-61624 -

15 Oct 2026, 19:17

Type Values Removed Values Added
References
  • () https://unit42.paloaltonetworks.com/fortimanager-cve-2024-47575-peerstitch-malware/#post-188095-_guyq53ar8k05 -

14 Oct 2026, 13:10

Type Values Removed Values Added
Summary
  • (es) Una limitación inadecuada de un nombre de ruta a un directorio restringido ('salto de ruta') [CWE-22] vulnerabilidad en Fortinet FortiOS 7.6.0 a 7.6.4, FortiOS 7.4.0 a 7.4.9, FortiOS 7.2 todas las versiones, FortiOS 7.0 todas las versiones, FortiOS 6.4 todas las versiones, FortiPAM 1.7.0, FortiPAM 1.6 todas las versiones, FortiPAM 1.5 todas las versiones, FortiPAM 1.4 todas las versiones, FortiPAM 1.3 todas las versiones, FortiPAM 1.2 todas las versiones, FortiPAM 1.1 todas las versiones, FortiPAM 1.0 todas las versiones, FortiProxy 7.6.0 a 7.6.4, FortiProxy 7.4.0 a 7.4.11, FortiProxy 7.2 todas las versiones, FortiProxy 7.0 todas las versiones, FortiSwitchManager 7.2.0 a 7.2.7, FortiSwitchManager 7.0.0 a 7.0.6 puede permitir a un atacante autenticado con perfil de administrador y al menos permisos de lectura-escritura escribir o eliminar archivos arbitrarios a través de comandos CLI específicos.
Information

Published : 2026-04-14 16:16

Updated : 2026-10-17 04:16

NVD link : CVE-2025-61624

Mitre link : CVE-2025-61624

CVE.ORG link : CVE-2025-61624

JSON object : View

Products Affected

fortinet

  • fortiproxy
  • fortiswitchmanager
  • fortios
  • fortipam

siemens

  • ruggedcom_ape1808_firmware
  • ruggedcom_ape1808
CWE
CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')