PT-2019-5735 · Fortinet · Forticlientems

Publicado 2019-05-16 · Atualizado 2020-03-17 · CVE-2020-9287

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient EMS online installer versions 6.2.1 and below

Description The issue is related to an Unsafe Search Path vulnerability in the FortiClient EMS online installer. This vulnerability can be exploited by a local attacker who has control over the directory where the FortiClientEMSOnlineInstaller.exe file resides, allowing them to execute arbitrary code on the system. The exploitation is possible through the upload of malicious Filter Library DLL files in that directory.

Recommendations For versions 6.2.1 and below, consider restricting access to the directory where FortiClientEMSOnlineInstaller.exe resides to prevent malicious DLL files from being uploaded. As a temporary workaround, avoid using the FortiClientEMSOnlineInstaller.exe file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

BDU:2021-01076

CVE-2020-9287

Produtos afetados

Forticlientems

Referências · 5

• https://bdu.fstec.ru/vul/2021-01076 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2020-9287 · Aviso do Fabricante
• https://fortiguard.com/psirt/FG-IR-19-060 · Aviso do Fabricante
• https://t.me/cvenotify/1718 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2020-9287 · Nota de Segurança