CVE-2025-54820: Buffer overflow via fgtupdates service
A Stack-based Buffer Overflow vulnerability [CWE-121] in FortiManager fgtupdates service may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.
Other sources
A Stack-based Buffer Overflow vulnerability [CWE-121] vulnerability in Fortinet FortiManager 7.4.0 through 7.4.2, FortiManager 7.2.0 through 7.2.10, FortiManager 6.4 all versions may allow a remote unauthenticated attacker to execute unauthorized commands via crafted requests, if the service is enabled. The success of the attack depends on the ability to bypass the stack protection mechanisms.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54820?
CVE-2025-54820 has a high severity rating due to its potential for remote code execution by unauthenticated attackers.
How do I fix CVE-2025-54820?
To fix CVE-2025-54820, upgrade FortiManager to version 7.4.3, 7.2.11, or ensure it is not using versions 6.4 or below.
Which versions of FortiManager are affected by CVE-2025-54820?
CVE-2025-54820 affects FortiManager versions 7.4.0 to 7.4.2, 7.2.0 to 7.2.10, and all of 6.4.
Can CVE-2025-54820 be exploited remotely?
Yes, CVE-2025-54820 can be exploited remotely if the fgtupdates service is enabled.
What type of vulnerability is CVE-2025-54820?
CVE-2025-54820 is classified as a stack-based buffer overflow vulnerability.