CISA Adds 3 Flaws to KEV Catalog, Impacting AMI MegaRAC, D-Link, Fortinet

🗓️ 26 Jun 2025 06:02:00Reported by The Hacker NewsType

CISA adds three vulnerabilities to KEV catalog affecting AMI MegaRAC, D-Link, and Fortinet devices.

Reporter	Title	Published	Views	Family All 58
ATTACKERKB	CVE-2019-6693	21 Nov 201900:00	–	attackerkb
ATTACKERKB	CVE-2024-0769	21 Jan 202400:00	–	attackerkb
ATTACKERKB	CVE-2024-54085	11 Mar 202500:00	–	attackerkb
BDU FSTEC	The vulnerability of the command-line interface (CLI) of FortiOS operating systems allows a perpetrator to gain unauthorized access to protected information.	31 Oct 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability in the hedwig.cgi script of D-Link DIR-859 router software allows a hacker to gain unauthorized access to protected information.	24 Jan 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the microprogramming software of AMI MegaRAC SP-X controllers, related to the bypassing of authentication mechanisms, allows attackers to influence the confidentiality, integrity, and accessibility of protected information.	23 Jun 202500:00	–	bdu_fstec
Broadcom	AMI Security Advisory AMI-SA-2025003 (CVE-2024-54084,CVE-2024-54085)	1 May 202500:00	–	broadcom
GithubExploit	Exploit for Use of Hard-coded Credentials in Fortinet Fortianalyzer	30 Jun 202308:48	–	githubexploit
Circl	CVE-2019-6693	6 Jul 202311:08	–	circl
Circl	CVE-2024-0769	20 Jan 202422:51	–	circl

27 Jun 2025 05:06Current

6.8Medium risk

Vulners AI Score6.8

CVSS 24 - 5

CVSS 3.15.3 - 9.8

CVSS 35.3

CVSS 410

EPSS0.82714