CVE-2025-13480

Upgrade Fudo Enterprise to version 5.6.3 or later, which includes fixes for the improper API authorization controls. This patch is the primary remediation and should be deployed immediately to all affected instances. The vendor release notes are available at https://download.fudosecurity.com/documentation/fudo/5_6/rn/RN_5.6.3.pdf. If immediate patching is not feasible, implement network-level mitigations: restrict network access to Fudo Enterprise to trusted administrative networks only (leveraging the AV:A-adjacent network-requirement), enforce firewall rules to block unauthorized access to the application, and audit user access logs to identify suspicious API calls to administrator endpoints. Additionally, review user privilege assignments and remove excessive low-privilege account access if not operationally necessary. These compensating controls reduce exposure but do not eliminate the vulnerability-patching remains the definitive fix.