7.8
CVE-2024-36507
- EPSS 0.03%
- Veröffentlicht 12.11.2024 19:15:10
- Zuletzt bearbeitet 14.11.2024 20:31:45
- Quelle psirt@fortinet.com
- CVE-Watchlists
- Unerledigt
LoginA untrusted search path in Fortinet FortiClientWindows versions 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0 allows an attacker to run arbitrary code via DLL hijacking and social engineering.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Fortinet ≫ FortiClient SwPlatformwindows Version >= 7.0.0 < 7.0.13
Fortinet ≫ FortiClient SwPlatformwindows Version >= 7.2.0 < 7.2.5
Fortinet ≫ FortiClient Version7.4.0 SwPlatformwindows
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.03% | 0.077 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
|
| psirt@fortinet.com | 7.3 | 1.3 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
|
CWE-426 Untrusted Search Path
The product searches for critical resources using an externally-supplied search path that can point to resources that are not under the product's direct control.