FortiClientEMS vulnerability

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Published 15 Mar 2020Updated 13 Oct 20262 sources
CVSS 7.7

What happened

A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable

Affected versions

FortiClientEMS: 06.02.00 through 06.02.01 (semver); 6.0.8; 06.00.00 through 06.00.06 (semver); 6.0.0 through before 6.0.* (semver) Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

  • Apply vendor-provided updates or mitigations.
  • Review affected product exposure and access logs.

Public PoC references

No public PoC reference has passed the current publication threshold.