PT-2023-7194 · Fortinet · Forticlient

Published 2023-11-14 · Updated 2023-11-21 · CVE-2023-41840

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows version 7.0.9

Description The issue is related to an untrusted search path vulnerability that allows an attacker to perform a DLL Hijack attack. This can be achieved by placing a malicious OpenSSL engine library in the search path, which can lead to arbitrary code execution. The vulnerability is associated with the exploitation of a legitimate DLL file being replaced by a malicious library.

Recommendations For Fortinet FortiClientWindows version 7.0.9, consider restricting access to the search path to prevent malicious libraries from being loaded, until a patch is available. As a temporary workaround, avoid using the vulnerable OpenSSL engine library in the affected search path.

Fix

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2023-08221

CVE-2023-41840

Affected Products

Forticlient

References · 6

• https://bdu.fstec.ru/vul/2023-08221 · Security Note
• https://fortiguard.com/psirt/FG-IR-23-274 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41840 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-41840 · Security Note
• https://vuldb.com/?id.245180 · Note
• https://twitter.com/CVEnew/status/1724491742412496941 · Twitter Post