Fortinet FortiOS Use of Hard-Coded Credentials Vulnerability
Fortinet · FortiOS
Date added (CISA)
2025-06-25
Remediation due
2025-07-16
Known ransomware use
Yes
Remediation priority
P1 — known ransomware use · past CISA due date
Description
Fortinet FortiOS contains a use of hard-coded credentials vulnerability that could allow an attacker to cipher sensitive data in FortiOS configuration backup file via knowledge of the hard-coded key.