DeutschShown in its original language — a full translation is planned for a future version.
Fortinet FortiClient Mac, Windows, EMS und FortiVoice: Mehrere Schwachstellen
view advisory published 2025-05-13
Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiClient und Fortinet FortiVoice ausnutzen, um beliebigen Code auszuführen, erhöhte Rechte zu erlangen, Daten zu manipulieren und vertrauliche Informationen preiszugeben.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-25251US | high7.8OT elevated | — | ||
An Incorrect Authorization vulnerability [CWE-863] in FortiClient Mac 7.4.0 through 7.4.2, 7.2.0 through 7.2.8, 7.0.0 through 7.0.14 may allow a local attacker to escalate privileg… | ||||
| CVE-2025-24473US | low3.7 | — | ||
A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0… | ||||
| CVE-2025-22859US | — | — | ||
A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 through 7.4.1 may allow a remote unauthenticated attacker to p… | ||||
| CVE-2024-35281US | high7.8 | — | ||
An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3… | ||||
02
references
External citations — patches, advisories, analysis.
- WID-SEC-W-2025-1021 - CSAF Versionself
- WID-SEC-2025-1021 - Portal Versionself
- FortiGuard PSIRT Advisory FG-IR-24-025 vom 2025-05-13external
- FortiGuard PSIRT Advisory FG-IR-24-548 vom 2025-05-13external
- FortiGuard PSIRT Advisory FG-IR-24-552 vom 2025-05-13external
- FortiGuard PSIRT Advisory FG-IR-25-016 vom 2025-05-13external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan