CVE-2025-58693

MEDIUM
6.5CVSS v3
CVSS v2
0.22% EPSS (exploit probability)
CWE-22CWE

Description

An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 through 7.0.7 allows a privileged attacker to delete files from the underlying filesystem via crafted HTTP or HTTPs requests.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references