PT-2025-47357 · Fortinet · Forticlientwindows

Publicado 2025-11-18 · Atualizado 2025-11-19 · CVE-2025-54660

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.0.0 through 7.4.3 Fortinet FortiClientWindows version 7.2.0 through 7.2.10

Description A debug code issue exists in FortiClientWindows that could allow a local attacker to execute the application step by step and obtain the stored VPN user password. The issue involves leftover debug code that exposes VPN credentials.

Recommendations FortiClientWindows versions 7.0.0 through 7.4.3 should be updated. FortiClientWindows versions 7.2.0 through 7.2.10 should be updated.

Correção

LPE

Enumeração de Fraquezas

CWE-489

Identificadores relacionados

BDU:2025-14870

CVE-2025-54660

Produtos afetados

Forticlientwindows

Referências · 8

• https://fortiguard.fortinet.com/psirt/FG-IR-25-844 · Aviso do Fabricante
• https://twitter.com/0dayPublishing/status/1990867584116216166 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-54660 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2025-14870 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-54660 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1990887289182941394 · Publicação no Twitter
• https://t.me/CVEtracker/37636 · Publicação no Telegram
• https://twitter.com/CVEnew/status/1991042965939089446 · Publicação no Twitter