PT-2019-5735 · Fortinet · Forticlientems

Published 2019-05-16 · Updated 2020-03-17 · CVE-2020-9287

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient EMS online installer versions 6.2.1 and below

Description The issue is related to an Unsafe Search Path vulnerability in the FortiClient EMS online installer. This vulnerability can be exploited by a local attacker who has control over the directory where the FortiClientEMSOnlineInstaller.exe file resides, allowing them to execute arbitrary code on the system. The exploitation is possible through the upload of malicious Filter Library DLL files in that directory.

Recommendations For versions 6.2.1 and below, consider restricting access to the directory where FortiClientEMSOnlineInstaller.exe resides to prevent malicious DLL files from being uploaded. As a temporary workaround, avoid using the FortiClientEMSOnlineInstaller.exe file until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

BDU:2021-01076

CVE-2020-9287

Affected Products

Forticlientems

References · 5

• https://bdu.fstec.ru/vul/2021-01076 · Security Note
• https://osv.dev/vulnerability/CVE-2020-9287 · Vendor Advisory
• https://fortiguard.com/psirt/FG-IR-19-060 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-9287 · Security Note
• https://t.me/cvenotify/1718 · Telegram Post