¡¾·ì϶¹«¸æ¡¿FortiSIEM ²Ù×÷ϵͳºÅÁî×¢Èë·ì϶(CVE-2025-25256)

°ä²¼¹¦·ò 2025-08-18

Ò»¡¢·ì϶¸ÅÊö


·ìϼûû³Æ

FortiSIEM ²Ù×÷ϵͳºÅÁî×¢Èë·ì϶

CVE   ID

CVE-2025-25256

·ì϶ÀàÐÍ

ºÅÁî×¢Èë

·¢ÏÖ¹¦·ò

2025-08-18

·ì϶ÆÀ·Ö

9.8

·ì϶µÈ¼¶

ÑϳÁ

¹¥»÷ÏòÁ¿

ÍøÂç

ËùÐèȨÏÞ

ÎÞ

ÀûÓÃÄѶÈ

µÍ

Óû§½»»¥

²»±ØÒª

PoC/EXP

Òѹ«¿ª

ÔÚÒ°ÀûÓÃ

δ·¢ÏÖ


FortiSIEMÊÇFortinetÌṩµÄ°²È«ÐÅÏ¢ºÍÊÂÎñÖÎÀí£¨SIEM£©½â¾ö¹æ»®£¬ £¬£¬ £¬£¬£¬£¬Ö¼ÔÚÔ®ÊÔìóÒµ¼¯ÖÐÍøÂç¡¢·ÖÎöºÍÏìÓ¦°²È«ÊÂÎñ¡£¡£¡£¡£¡£¡£¡£¡£Ëü½áºÏÁËÈÕÖ¾ÖÎÀí¡¢ÊÂÎñ¹ØÁª·ÖÎö¡¢ÊµÊ±¼à¿ØµÈÖ°ÄÜ£¬ £¬£¬ £¬£¬£¬£¬¿ÉÄܼì²âºÍÓ¦¶Ô¸÷ÀàÍøÂ簲ȫÍþв¡£¡£¡£¡£¡£¡£¡£¡£FortiSIEMͨ¹ý¼¯³ÉÍþвµý±¨ºÍ×Ô¶¯»¯ÏìÓ¦£¬ £¬£¬ £¬£¬£¬£¬ÌáÉýÁË°²È«ÔËÓªµÄЧÄÜ£¬ £¬£¬ £¬£¬£¬£¬Ô®ÊÖ×é֯ʵÏֺϹæÐÔÖÎÀí¡£¡£¡£¡£¡£¡£¡£¡£¸Ãƽ̨֧³Ö¶àÖÖÉ豸ºÍÀûÓõļ¯³É£¬ £¬£¬ £¬£¬£¬£¬ºÏÓÃÓÚ´ó¹æÄ£ÆóÒµµÄ°²È«¼à¿ØÐèÒª¡£¡£¡£¡£¡£¡£¡£¡£


2025Äê8ÔÂ18ÈÕ£¬ £¬£¬ £¬£¬£¬£¬8827Ì«Ñô¼¯Íż¯ÍÅVSRC¼à²âµ½FortiSIEMµÄ¸ßΣ²Ù×÷ϵͳºÅÁî×¢Èë·ì϶CVE-2025-25256¡£¡£¡£¡£¡£¡£¡£¡£¸Ã·ì϶ÔÊÐíδ¾­ÈÏÖ¤µÄ¹¥»÷Õßͨ¹ý»ú¹Ø¾«ÐÄÉè¼ÆµÄCLIÒªÇó£¬ £¬£¬ £¬£¬£¬£¬ÔÚÊÜÓ°ÏìϵͳÉÏÖ´ÐÐËÁÒâºÅÁ £¬£¬ £¬£¬£¬£¬´Ó¶ø¿ÉÄܵ¼ÖÂϵͳÆëÈ«½ÚÔì¡£¡£¡£¡£¡£¡£¡£¡£¸Ã·ì϶µÄʵÓÃÀûÓôúÂëÒÑÔÚÒ°±í±»·¢ÏÖ£¬ £¬£¬ £¬£¬£¬£¬¹¥»÷Õß¿ÉÇáËÉÀûÓø÷ì϶ִÐжñÒâºÅÁ £¬£¬ £¬£¬£¬£¬ÏÔÖøÔö³¤ÏµÍ³±»¹¥»÷µÄ·çÏÕ£¬ £¬£¬ £¬£¬£¬£¬ÓÈÆäÊÇÔÚ¹¥»÷ÕßÒÑ°ÑÎÕºÅÁî×¢ÈëÀûÓôúÂëµÄÇé¿öÏ¡£¡£¡£¡£¡£¡£¡£¡£·ì϶ÆÀ·Ö9.8£¬ £¬£¬ £¬£¬£¬£¬·ì϶¼¶±ðÑϳÁ¡£¡£¡£¡£¡£¡£¡£¡£


¶þ¡¢Ó°ÏìÁìÓò


7.3.0 <= FortiSIEM <= 7.3.1
7.2.0 <= FortiSIEM <= 7.2.5
7.1.0 <= FortiSIEM <= 7.1.7
7.0.0 <= FortiSIEM <= 7.0.3
6.7.0 <= FortiSIEM <= 6.7.9
FortiSIEM 6.6 (all versions)
FortiSIEM 6.5 (all versions)
FortiSIEM 6.4 (all versions)
FortiSIEM 6.3 (all versions)
FortiSIEM 6.2 (all versions)
FortiSIEM 6.1 (all versions)
FortiSIEM 5.4 (all versions)¡£¡£¡£¡£¡£¡£¡£¡£


Èý¡¢°²È«´ëÊ©


3.1 Éý¼¶°æ±¾


fortinet¹Ù·½ÒÑ°ä²¼°²È«²¹¶¡£¡£¡£¡£¡£¡£¡£¡£¬ £¬£¬ £¬£¬£¬£¬½¨ÒéÓû§Éý¼¶µ½ÈçÏ°汾¡£¡£¡£¡£¡£¡£¡£¡£
7.3.0 <= FortiSIEM <= 7.3.1 Éý¼¶µ½ 7.3.2 »ò¸ü¸ß°æ±¾
7.2.0 <= FortiSIEM <= 7.2.5 Éý¼¶µ½ 7.2.6 »ò¸ü¸ß°æ±¾
7.1.0 <= FortiSIEM <= 7.1.7 Éý¼¶µ½ 7.1.8 »ò¸ü¸ß°æ±¾
7.0.0 <= FortiSIEM <= 7.0.3 Éý¼¶µ½ 7.0.4 »ò¸ü¸ß°æ±¾
6.7.0 <= FortiSIEM <= 6.7.9 Éý¼¶µ½ 6.7.10 »ò¸ü¸ß°æ±¾
FortiSIEM 6.6 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 6.5 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 6.4 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 6.3 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 6.2 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 6.1 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)
FortiSIEM 5.4 (Ǩáãµ½Ò»¸öÒѽ¨¸´µÄ°ä²¼°æ±¾)


ÏÂÔØÁ´½Ó£ºhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-50154


3.2 һʱ´ëÊ©


Ï޶ȶÔphMonitor¶Ë¿Ú£¨7900£©µÄ½Ó¼û£¬ £¬£¬ £¬£¬£¬£¬Ô¤·Àδ¾­ÊÚȨµÄ½Ó¼û¡£¡£¡£¡£¡£¡£¡£¡£


3.3 ͨÓý¨Òé


? ¶¨ÆÚ¸üÐÂϵͳ²¹¶¡£¡£¡£¡£¡£¡£¡£¡£¬ £¬£¬ £¬£¬£¬£¬Ï÷¼õϵͳ·ì϶£¬ £¬£¬ £¬£¬£¬£¬ÌáÉý·þÎñÆ÷µÄ°²È«ÐÔ¡£¡£¡£¡£¡£¡£¡£¡£
? ¼ÓǿϵͳºÍÍøÂçµÄ½Ó¼û½ÚÔ죬 £¬£¬ £¬£¬£¬£¬Åú¸Ä·À»ðǽսÊõ£¬ £¬£¬ £¬£¬£¬£¬¹Ø¹Ø·Ç±ØÒªµÄÀûÓö˿ڻò·þÎñ£¬ £¬£¬ £¬£¬£¬£¬Ï÷¼õ½«Î£ÏÕ·þÎñ£¨ÈçSSH¡¢RDPµÈ£©Â¶³öµ½¹«Íø£¬ £¬£¬ £¬£¬£¬£¬Ï÷¼õ¹¥»÷Ãæ¡£¡£¡£¡£¡£¡£¡£¡£
? Ê¹ÓÃÆóÒµ¼¶°²È«²úÆ·£¬ £¬£¬ £¬£¬£¬£¬ÌáÉýÆóÒµµÄÍøÂ簲ȫ»úÄÜ¡£¡£¡£¡£¡£¡£¡£¡£
? ¼ÓǿϵͳÓû§ºÍȨÏÞÖÎÀí£¬ £¬£¬ £¬£¬£¬£¬ÆôÓöà³É·ÖÈÏÖ¤»úÔìºÍ×îÓ×ȨÏÞ×¼Ôò£¬ £¬£¬ £¬£¬£¬£¬Óû§ºÍÈí¼þȨÏÞӦά³ÖÔÚ×îµÍÏ޶ȡ£¡£¡£¡£¡£¡£¡£¡£
? ÆôÓÃÇ¿ÃÜÂëÕ½Êõ²¢ÉèÖÃΪ¶¨ÆÚÅú¸Ä¡£¡£¡£¡£¡£¡£¡£¡£


3.4 ²Î¿¼Á´½Ó


https://www.theregister.com/2025/08/13/fortinet_discloses_critical_bug/
https://fortiguard.fortinet.com/psirt/FG-IR-25-152