PT-2025-20901 · Fortinet · Forticlientmac+1

CVE-2024-35281 · Publicado 2025-05-13 · Atualizado 2026-02-05

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: FortiClientMac versions 7.0 through 7.4.2 FortiClientMac versions 7.0 through 7.2.8 FortiVoiceUCDesktop version 3.0

Description: An improper isolation or compartmentalization issue may allow an authenticated attacker to inject code via Electron environment variables.

Recommendations: For FortiClientMac versions 7.0 through 7.4.2, consider restricting access to the Electron environment variables as a temporary workaround until a patch is available. For FortiClientMac versions 7.0 through 7.2.8, consider restricting access to the Electron environment variables as a temporary workaround until a patch is available. For FortiVoiceUCDesktop version 3.0, consider restricting access to the Electron environment variables as a temporary workaround until a patch is available.

Correção

Enumeração de Fraquezas

CWE-653

Identificadores relacionados

BDU:2025-11226

CVE-2024-35281

Produtos afetados

Forticlientmac

Fortivoiceucdesktop

Referências · 10

• https://vuldb.com/?id.308639 · Nota
• https://osv.dev/vulnerability/CVE-2024-35281 · Aviso do Fabricante
• https://t.me/cveNotify/150987 · Publicação no Telegram
• https://cybersecurity-help.cz/vdb/SB2025051365 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-35281 · Nota de Segurança
• https://fortiguard.fortinet.com/psirt/FG-IR-24-025 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-11226 · Nota de Segurança
• https://t.me/cveNotify/143339 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1922310005526540677 · Publicação no Twitter
• https://t.me/cvetracker/23739 · Publicação no Telegram