What is the severity of FG-IR-24-472?

The severity of FG-IR-24-472 is considered critical due to the potential for unauthenticated access to critical functions.

How do I fix FG-IR-24-472?

To fix FG-IR-24-472, upgrade FortiOS to version 7.6.1 or later, FortiProxy to version 7.6.2 or later, or FortiSwitchManager to version 7.2.6.

Which products are affected by FG-IR-24-472?

FG-IR-24-472 affects FortiOS, FortiProxy, and FortiSwitchManager based on their configured versions.

What is the impact of FG-IR-24-472?

The impact of FG-IR-24-472 allows attackers to exploit missing authentication, potentially compromising critical system functions.

Is FG-IR-24-472 a known vulnerability?

Yes, FG-IR-24-472 is a recognized vulnerability that has been disclosed and documented by Fortinet.

Vulnerability/
FG-IR-24-472

critical

13/5/2025

FG-IR-24-472: TACACS+ authentication bypass

First published: Tue May 13 2025(Updated: )

A missing authentication for critical function vulnerability [CWE-306] in FortiOS, FortiProxy, and FortiSwitchManager TACACS+ configured to use a remote TACACS+ server for authentication, that has itself been configured to use ASCII authentication may allow an attacker with knowledge of an existing admin account to access the device as a valid admin via an authentication bypass.

Affected Software	Affected Version	How to fix
FortiOS	=.
FortiOS	>=7.4.4<=7.4.6
Fortinet FortiProxy SSL VPN webmode	>=7.6.0<=7.6.1
Fortinet FortiSwitchManager	=.

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of FG-IR-24-472?
The severity of FG-IR-24-472 is considered critical due to the potential for unauthenticated access to critical functions.
How do I fix FG-IR-24-472?
To fix FG-IR-24-472, upgrade FortiOS to version 7.6.1 or later, FortiProxy to version 7.6.2 or later, or FortiSwitchManager to version 7.2.6.
Which products are affected by FG-IR-24-472?
FG-IR-24-472 affects FortiOS, FortiProxy, and FortiSwitchManager based on their configured versions.
What is the impact of FG-IR-24-472?
The impact of FG-IR-24-472 allows attackers to exploit missing authentication, potentially compromising critical system functions.
Is FG-IR-24-472 a known vulnerability?
Yes, FG-IR-24-472 is a recognized vulnerability that has been disclosed and documented by Fortinet.

collector/fortiguard-psirt-latest
source/FortiGuard
alias/CVE-2025-22252
agent/last-modified-date
agent/source
agent/type
agent/first-publish-date
agent/event
collector/fortiguard-psirt
agent/software-canonical-lookup
agent/severity
agent/title
agent/references
agent/description
agent/tags
agent/softwarecombine
vendor/fortinet
canonical/fortios
version/fortios/.
version/fortios/7.4.4
version/fortios/7.4.6
canonical/fortinet fortiproxy ssl vpn webmode
version/fortinet fortiproxy ssl vpn webmode/7.6.0
version/fortinet fortiproxy ssl vpn webmode/7.6.1
canonical/fortinet fortiswitchmanager
version/fortinet fortiswitchmanager/.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.