CVE-2025-53847: Missing Authentication for critical function in CAPWAP daemon
A missing authentication for critical function vulnerability [CWE-306] in FortiOS and FortiSwitchManager CAPWAP daemon may allow a local unauthenticated attacker on the same local IP subnet to write device configuration via specially crafted requests. To be successful, this attack requires the targeted FortiGate device to run a specific, non default configuration.
Other sources
A missing authentication for critical function vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.11, FortiOS 7.0.0 through 7.0.17, FortiOS 6.4 all versions, FortiOS 6.2.9 through 6.2.17 allows attacker to execute unauthorized code or commands via specially crafted packets.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53847?
CVE-2025-53847 is classified as a critical severity vulnerability due to its potential for unauthorized access and configuration changes.
How do I fix CVE-2025-53847?
To fix CVE-2025-53847, upgrade to FortiOS version 7.6.4 or later, 7.4.9 or later, 7.2.12 or later, or 7.0.18 or later.
What is the impact of CVE-2025-53847?
The impact of CVE-2025-53847 allows local unauthenticated attackers to write device configuration, potentially compromising device integrity.
Which Fortinet products are affected by CVE-2025-53847?
CVE-2025-53847 affects various versions of FortiOS across multiple releases including 6.4, 7.0.x, 7.2.x, 7.4.x, and 7.6.x.
Can CVE-2025-53847 be exploited remotely?
No, CVE-2025-53847 requires an attacker to be on the same local IP subnet to exploit the vulnerability.