Cyber Resilience

CVE-2025-67862

Fortinet Fortios 6.4.0 – 6.4.16

Published
09 June 2026
Modified
14 July 2026
Patch / advisory
CVSS Score v3.1 6.7
Click a component to see what it means
Raw vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score 0.0015 5th percentile
Risk Priority 47 floored blend · peak EPSS

Summary

CVE-2025-67862 is a medium-severity Internal Asset Exposed to Unsafe Debug Access Level or State (CWE-1244) vulnerability in Fortinet Fortios. Its CVSS base score is 6.7 (Medium).

Operationally, ranked at the 5th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to AC-3 (Access Enforcement) and AC-6 (Least Privilege) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

An Internal Asset Exposed to Unsafe Debug Access Level or State vulnerability [CWE-1244] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.2, FortiOS 7.4.0 through 7.4.7, FortiOS 7.2.0 through 7.2.10, FortiOS 7.0.0 through 7.0.16, FortiOS 6.4 all versions, FortiProxy 7.6.0 through 7.6.3,…

more

FortiProxy 7.4.0 through 7.4.10, FortiProxy 7.2.0 through 7.2.14, FortiProxy 7.0 all versions may allow an authenticated admin to execute lua scripts via crafted CLI commands.

CWE(s)

Related Threats

CVEs Like This One

CVE-2023-26207Same product: Fortinet Fortios
CVE-2024-23111Same product: Fortinet Fortios
CVE-2023-37930Same product: Fortinet Fortios
CVE-2023-29180Same product: Fortinet Fortios
CVE-2026-59840Same product: Fortinet Fortios
CVE-2023-36641Same product: Fortinet Fortios
CVE-2025-43892Same product: Fortinet Fortios
CVE-2023-29183Same product: Fortinet Fortios
CVE-2023-33306Same product: Fortinet Fortios
CVE-2024-26015Same product: Fortinet Fortios

Affected Assets

fortinet
fortios
6.4.0 — 6.4.16 · 7.0.0 — 7.0.16 · 7.2.0 — 7.2.11
fortinet
fortiproxy
7.0.0 — 7.0.23 · 7.2.0 — 7.2.15 · 7.4.0 — 7.4.11

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

Enforces approved authorizations on logical access, directly stopping incorrect debug access levels from being granted to untrusted agents.

Requires least-privilege assignment of access rights, preventing over-privileged debug states on internal assets.

Mandates restrictive, approved configuration settings that would block unsafe debug access level assignments.

Requires application of security engineering principles such as least privilege and isolation during design of debug mechanisms.

Isolates security functions from non-security functions, reducing exposure of internal assets through debug paths.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.PS-06 full match
prevents

Secure development practices throughout the life cycle are the primary means of avoiding unsafe debug access assignments.

PR.AA-05 mostly match
prevents

Defining and enforcing least-privilege access permissions directly prevents incorrect debug access levels from being assigned.

PR.PS-01 mostly match
prevents

Configuration management practices ensure debug interfaces receive the intended access-level settings.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

finds

Security testing can detect unsafe debug states, but testing alone does not prevent the design flaw.

mitigates

Privileged utility programs may include debug tools, but the control does not address hardware debug access levels.

mitigates

Privileged access rights management can limit debug-level access but does not specifically address hardware debug interface misconfiguration.

prevents

Secure development lifecycle can include debug interface design reviews but does not guarantee correct access-level assignment.

prevents

Secure system architecture principles can require proper debug port isolation, yet the control is broader than this specific weakness.

mitigates

Information access restriction can reduce exposure of internal assets but does not cover physical debug port access levels.

References