DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiClient für macOS und Windows: Mehrere Schwachstellen
view advisory published 2024-11-12
Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiClient für macOS und Windows ausnutzen, um beliebigen Programmcode auszuführen, Daten zu manipulieren oder seine Rechte zu erweitern.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-47574US | high7.8OT elevated | — | ||
A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 thr… | ||||
| CVE-2024-40592US | medium6.7 | — | ||
An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 an… | ||||
| CVE-2024-36513US | high8.8 | — | ||
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated us… | ||||
| CVE-2024-36507US | high7.8 | — | ||
A untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL… | ||||
02
references
External citations — patches, advisories, analysis.
- FortiGuard PSIRT Advisory FG-IR-24-022 vom 2024-11-12external
- FortiGuard PSIRT Advisory FG-IR-24-144 vom 2024-11-12external
- FortiGuard PSIRT Advisory FG-IR-24-199 vom 2024-11-12external
- FortiGuard PSIRT Advisory FG-IR-24-205 vom 2024-11-12external
- WID-SEC-W-2024-3450 - CSAF Versionself
- WID-SEC-2024-3450 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan