PT-2021-7518 · Fortinet · Forticlient

Published 2021-11-23 · Updated 2022-04-14 · CVE-2021-44169

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient (Windows) versions 6.0.10 and below Fortinet FortiClient (Windows) versions 6.2.9 and below Fortinet FortiClient (Windows) versions 6.4.7 and below Fortinet FortiClient (Windows) versions 7.0.3 and below

Description The issue is related to an improper initialization in Fortinet FortiClient for Windows, which can be exploited by an attacker to gain administrative privileges. This can be achieved by placing a malicious executable inside the FortiClient installer's directory. The vulnerability is associated with errors in initialization.

Recommendations For versions 6.0.10 and below, update to a version above 6.0.10 to resolve the issue. For versions 6.2.9 and below, update to a version above 6.2.9 to resolve the issue. For versions 6.4.7 and below, update to a version above 6.4.7 to resolve the issue. For versions 7.0.3 and below, update to a version above 7.0.3 to resolve the issue. As a temporary workaround, consider restricting access to the FortiClient installer's directory to minimize the risk of exploitation.

Fix

Improper Initialization

Weakness Enumeration

CWE-665

Related Identifiers

BDU:2022-07199

CVE-2021-44169

Affected Products

Forticlient

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2021-44169 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44169 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/cve-2021-44169 · Security Note
• https://fortiguard.com/psirt/FG-IR-21-238 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07199 · Security Note
• https://t.me/cvenotify/28511 · Telegram Post
• https://t.me/cvenotify/28521 · Telegram Post
• https://vuldb.com/?id.196586 · Note