PatchTheCVEfortiswitch vulnerabilities and fixes
Recent CVEs affecting fortiswitch, with upgrade or downgrade steps. 4 tracked.
fortiswitch has 4 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2025-04-08. Highest priority: CVE-2023-25610 (score 72/100).
- CVE-2024-48887 CRITICAL 9.8 UPGRADE A unverified password change vulnerability in Fortinet FortiSwitch GUI may allow a remote unauthenticated att
- CVE-2023-37937 HIGH 7.8 UPGRADE An improper neutralization of special elements used in an os command ('os command injection') in Fortinet Fort
- CVE-2023-37936 CRITICAL 9.8 UPGRADE A use of hard-coded cryptographic key in Fortinet FortiSwitch version 7.4.0 and 7.2.0 through 7.2.5 and 7.0.0
- CVE-2023-25610 CRITICAL 9.8 UPGRADE UPGRADE A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS ver
FAQ
How do I fix fortiswitch vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is fortiswitch being exploited right now?
None of the tracked fortiswitch CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which fortiswitch CVE should I patch first?
CVE-2023-25610 currently ranks highest (72/100): A buffer underwrite ('buffer underflow') vulnerability in the administrative interface of Fortinet FortiOS ver.