[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fpVhCRBl46JH0b5PPXM1BACsIOgbgbaPIO6Li-qUlB2I":3,"g5a-risk:CVE-2025-25249":205},{"success":4,"data":5,"meta":202},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":27,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":68,"references":69,"referencesCount":91,"weaknesses":92,"weaknessesCount":106,"isActivelyExploited":4,"cisaInfo":107,"otxData":27,"relatedBlogPosts":108,"seoMetadata":109,"configurations":134,"relatedVendorCves":186,"notableEvents":187},"CVE-2025-25249","What is CVE-2025-25249?","A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiSwitchManager 7.2.0 through 7.2.6, FortiSwitchManager 7.0.0 through 7.0.5 allows attacker to execute unauthorized code or commands via specially crafted packets","A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 ...","2026-01-13T17:15:56.91","2026-10-07T18:17:13.18",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":39},[16,30],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"psirt@fortinet.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","UNCHANGED",8.1,null,2.2,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":36,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":34,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":35,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"LOW","CRITICAL",3.9,[],[],[],0.03802,[40,40,40,40,40,40,40],"Critical",[44,49,52,56,59,64],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"fortinet","fortios","*","cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:*",{"vendor":45,"product":50,"version":47,"criteria":51,"vulnerable":4},"fortiswitchmanager","cpe:2.3:a:fortinet:fortiswitchmanager:*:*:*:*:*:*:*:*",{"vendor":45,"product":53,"version":54,"criteria":55,"vulnerable":4},"fortisase","25.1.39","cpe:2.3:a:fortinet:fortisase:25.1.39:*:*:*:-:*:*:*",{"vendor":45,"product":53,"version":57,"criteria":58,"vulnerable":4},"25.1.51","cpe:2.3:a:fortinet:fortisase:25.1.51:*:*:*:-:*:*:*",{"vendor":60,"product":61,"version":62,"criteria":63,"vulnerable":4},"siemens","ruggedcom_ape1808_firmware","-","cpe:2.3:o:siemens:ruggedcom_ape1808_firmware:-:*:*:*:*:*:*:*",{"vendor":60,"product":65,"version":62,"criteria":66,"vulnerable":67},"ruggedcom_ape1808","cpe:2.3:h:siemens:ruggedcom_ape1808:-:*:*:*:*:*:*:*",false,6,[70,76,81,86],{"url":71,"source":72,"tags":73},"https:\u002F\u002Ffortiguard.fortinet.com\u002Fpsirt\u002FFG-IR-25-084","Fortinet",[74,75],"Mitigation","Vendor Advisory",{"url":77,"source":78,"tags":79},"https:\u002F\u002Fcert-portal.siemens.com\u002Fproductcert\u002Fhtml\u002Fssa-864900.html","Siemens",[80],"Third Party Advisory",{"url":82,"source":83,"tags":84},"https:\u002F\u002Fsocradar.io\u002Fblog\u002Fcve-2025-25249-pivotc2-fortigate-rat\u002F","Socradar",[85,80],"Exploit",{"url":87,"source":88,"tags":89},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2025-25249","CISA",[90],"US Government Resource",4,[93,101],{"id":94,"name":95,"description":96,"extendedDescription":97,"status":98,"abstraction":99,"structure":100},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","","Draft","Base","Simple",{"id":102,"name":103,"description":104,"extendedDescription":97,"status":98,"abstraction":105,"structure":100},"CWE-122","Heap-based Buffer Overflow","A heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().","Variant",2,{"shortDescription":97,"requiredAction":97,"vulnerabilityName":97,"dateAdded":27},[],{"title":110,"metaDescription":111,"keywords":112,"canonicalUrl":113,"structuredData":114},"What is CVE-2025-25249? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2025-25249, a critical severity cyber security vulnerability from 2026. A heap-based buffer overflow vulnerability in Fortinet ...","CVE-2025-25249, CVE-2025-25249 vulnerability, CVE-2025-25249 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2026, CVSS score, exploit, patch, remediation, fortinet security, siemens security, fortios vulnerability, fortiswitchmanager vulnerability, fortisase vulnerability, ruggedcom_ape1808_firmware vulnerability, ruggedcom_ape1808 vulnerability","\u002Fwhat-is\u002Fcve-2025-25249",{"@context":115,"@type":116,"headline":110,"description":111,"datePublished":10,"dateModified":11,"author":117,"publisher":121,"about":125,"mainEntityOfPage":129,"articleSection":132,"keywords":133},"https:\u002F\u002Fschema.org","TechArticle",{"@type":118,"name":119,"url":120},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":118,"name":119,"url":120,"logo":122},{"@type":123,"url":124},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":126,"name":6,"description":127,"additionalType":128},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":130,"@id":131},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2025-25249","Cybersecurity","CVE-2025-25249, CVE-2025-25249 vulnerability, CVE-2025-25249 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[135,156,167,175],{"Operator":27,"Negate":27,"Nodes":136},[137],{"Operator":138,"Negate":67,"CPEMatch":139},"OR",[140,144,148,152],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":141,"VersionStartExcluding":27,"VersionStartIncluding":142,"VersionEndExcluding":143,"VersionEndIncluding":27},"7B071609-D589-44A8-8E7A-010B5BAA36EE","6.4.0","7.0.18",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":145,"VersionStartExcluding":27,"VersionStartIncluding":146,"VersionEndExcluding":147,"VersionEndIncluding":27},"E8FAAA2E-7A53-4F6B-A9C7-1E2B4CB5F7EB","7.2.0","7.2.12",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":149,"VersionStartExcluding":27,"VersionStartIncluding":150,"VersionEndExcluding":151,"VersionEndIncluding":27},"2093EFE3-4B7F-4806-9850-C42B26BC64AC","7.4.0","7.4.9",{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":153,"VersionStartExcluding":27,"VersionStartIncluding":154,"VersionEndExcluding":155,"VersionEndIncluding":27},"C1C30E0D-7F09-42D2-9EB1-E2196BD50D75","7.6.0","7.6.4",{"Operator":27,"Negate":27,"Nodes":157},[158],{"Operator":138,"Negate":67,"CPEMatch":159},[160,164],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":161,"VersionStartExcluding":27,"VersionStartIncluding":162,"VersionEndExcluding":163,"VersionEndIncluding":27},"F1B9AA70-BB46-403B-94C1-D94C64E22334","7.0.0","7.0.6",{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":165,"VersionStartExcluding":27,"VersionStartIncluding":146,"VersionEndExcluding":166,"VersionEndIncluding":27},"EE22A407-02CB-4979-A38D-9EBAFEB350F6","7.2.7",{"Operator":27,"Negate":27,"Nodes":168},[169],{"Operator":138,"Negate":67,"CPEMatch":170},[171,173],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":172,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"77B84900-E96D-4E2C-8797-B1460E71874E",{"Vulnerable":4,"Criteria":58,"MatchCriteriaID":174,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"12A8EE3F-EEAF-460D-B2DB-551509DF0814",{"Operator":176,"Negate":27,"Nodes":177},"AND",[178,182],{"Operator":138,"Negate":67,"CPEMatch":179},[180],{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":181,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"37FDCA69-9049-40B4-88AF-F476901022B6",{"Operator":138,"Negate":67,"CPEMatch":183},[184],{"Vulnerable":67,"Criteria":66,"MatchCriteriaID":185,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"B89A6863-B602-4404-8D26-337FECABFFF0",[],[188,195],{"id":189,"eventType":190,"eventTime":191,"details":192,"label":193,"color":194},"8f827c70-1558-4daa-a07d-b56bef2481ca","NEW_NVD","2026-01-14T04:01:17.777963+00:00","New CVE added to NVD","Published to NVD","blue",{"id":196,"eventType":197,"eventTime":198,"details":199,"label":200,"color":201},"59fd5c3a-7690-45b7-8178-77618b9631cd","NEW_CISA","2026-09-10T04:01:13.426773+00:00","CVE added to CISA Known Exploited Vulnerabilities","Added to CISA KEV","red",{"lastModified":11,"cacheTime":203,"version":204},1792368434369,"2.0",{"score":206,"band":42,"action":207,"scoredAt":208},89,"Emergency patch","2026-10-16T07:10:48.827443+00:00"]