FortiClientWindows vulnerability

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Published 28 May 2019Updated 13 Oct 20262 sources
CVSS 8.8

What happened

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Affected versions

FortiClientWindows: 6.0.0 through 6.0.5 (semver); 5.6.0 through 5.6.6 (semver); 5.4.0 through 5.4.5 (semver); 5.2.0 through 5.2.6 (semver); 5.0.0 through 5.0.11 (semver); 4.3.0 through 4.3.5 (semver); 4.2.0 through 4.2.7 (semver); 4.1.0 through 4.1.3 (semver); 4.0.1 through 4.0.4 (semver); 5.6.0 through before 5.6.* (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.