Fortinet patches critical FortiSIEM flaw enabling unauthenticated remote code execution
TL;DR
Fortinet released patches for FortiSIEM to fix CVE-2025-64155, an unauthenticated OS command injection that could let an attacker execute code via crafted requests to the phMonitor service on port 7900, potentially enabling a reverse shell and root-level control. The flaw affects multiple FortiSIEM versions; users should upgrade to fixed releases or restrict access to port 7900 as a workaround. The advisory also patches a separate FortiFone vulnerability (CVE-2025-47855).
Topics:technologysecurity#cve-2025-64155#fortinet#fortisiem#os-command-injection#remote-code-execution#security
- Fortinet Fixes Critical FortiSIEM Flaw Allowing Unauthenticated Remote Code Execution The Hacker News
- FortiOS and FortiSwitchManager Vulnerability Let Remote Attackers Execute Arbitrary Code Cyber Security News
- Fortinet closes security vulnerabilities in FortiOS, FortiSIEM, and more heise online
- Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM SecurityWeek
- MS-ISAC Warns Of Fortinet Vulnerabilities And Code Risks The Cyber Express
Want the full story? Read the original reporting
Read on The Hacker News