WID-SEC-W-2024-0824

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Fortinet FortiClient: Mehrere Schwachstellen ermöglichen Codeausführung

view advisory published 2024-04-09

Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiClient ausnutzen, um beliebigen Programmcode auszuführen.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2023-45588UShigh7.8—
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute…
CVE-2024-31492UShigh7.8—
An external control of file name or path vulnerability [CWE-73] in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan