{"id":64303,"date":"2025-08-25T04:20:21","date_gmt":"2025-08-25T04:20:21","guid":{"rendered":""},"modified":"2025-09-08T12:32:40","modified_gmt":"2025-09-08T18:32:40","slug":"cve-2025-52970-fortinet-fortiweb-s-critical-parameter-handling-vulnerability","status":"publish","type":"post","link":"https:\/\/www.ameeba.com\/blog\/cve-2025-52970-fortinet-fortiweb-s-critical-parameter-handling-vulnerability\/","title":{"rendered":"CVE-2025-52970: Fortinet FortiWeb’s Critical Parameter Handling Vulnerability<\/strong>"},"content":{"rendered":"

Overview<\/strong><\/p>\n

The CVE-2025-52970 is a severe vulnerability found in specific versions of the Fortinet FortiWeb system. This vulnerability affects versions 7.6.3 and below, versions 7.4.7 and below, versions 7.2.10 and below, and 7.0.10 and below. This vulnerability is critical<\/a> because it allows an unauthenticated remote attacker, armed with non-public information about the device and targeted user, to gain admin privileges on the device via a specially crafted request.
\nThis vulnerability poses a significant risk to any organization using the affected versions of Fortinet FortiWeb, as it could potentially lead to a full system<\/a> compromise or data leakage. Therefore, organizations need to take immediate action to mitigate this risk.<\/p>\n

Vulnerability Summary<\/strong><\/p>\n

CVE ID: CVE-2025-52970
\nSeverity: High (CVSS 8.1)
\nAttack Vector: Network
\nPrivileges Required: None
\nUser Interaction: None
\nImpact: Full system compromise<\/a> or data leakage<\/p>\n

Affected Products<\/strong><\/p>

\r\n

\r\n \r\n \"Ameeba\r\n <\/a>\r\n A new way to communicate\r\n <\/h2>\r\n\r\n

\r\n Ameeba Chat is built on encrypted identity, not personal profiles.\r\n <\/p>\r\n\r\n

\r\n Message, call, share files, and coordinate with identities kept separate.\r\n <\/p>\r\n\r\n