DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiClient: Mehrere Schwachstellen
view advisory published 2024-09-10
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Fortinet FortiClient ausnutzen, um Informationen offenzulegen, beliebigen Code auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.
01
describes (5)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-35282US | medium4.6OT elevated | — | ||
A cleartext storage of sensitive information in memory vulnerability [CWE-316] affecting FortiClient VPN iOS 7.2 all versions, 7.0 all versions, 6.4 all versions, 6.2 all versions,… | ||||
| CVE-2024-33508US | high7.3 | — | ||
An improper neutralization of special elements used in a command ('Command Injection') vulnerability [CWE-77] in Fortinet FortiClientEMS 7.2.0 through 7.2.4, 7.0.0 through 7.0.12 m… | ||||
| CVE-2024-31489US | high8.1 | — | ||
AAn improper certificate validation vulnerability [CWE-295] in FortiClientWindows 7.2.0 through 7.2.2, 7.0.0 through 7.0.11, FortiClientLinux 7.2.0, 7.0.0 through 7.0.11 and Forti… | ||||
| CVE-2024-21753US | medium6.0 | — | ||
A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiClientEMS 7.2.0 through 7.2.4, FortiClientEMS 7.0 all versions, Fort… | ||||
| CVE-2022-45856US | medium5.9 | — | ||
An improper certificate validation vulnerability [CWE-295] in FortiClientWindows 6.4 all versions, 7.0.0 through 7.0.7, FortiClientMac 6.4 all versions, 7.0 all versions, 7.2.0 thr… | ||||
02
references
External citations — patches, advisories, analysis.
- FortiGuard PSIRT Advisory FG-IR-22-230 vom 2024-09-10external
- FortiGuard PSIRT Advisory FG-IR-22-282 vom 2024-09-10external
- FortiGuard PSIRT Advisory FG-IR-23-362 vom 2024-09-10external
- FortiGuard PSIRT Advisory FG-IR-24-123 vom 2024-09-10external
- FortiGuard PSIRT Advisory FG-IR-24-139 vom 2024-09-10external
- WID-SEC-W-2024-2111 - CSAF Versionself
- WID-SEC-2024-2111 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan