PT-2024-27039 · Fortinet · Forticlient

Published 2024-11-12 · Updated 2025-01-12 · CVE-2024-36507

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.0.0 through 7.0.12 Fortinet FortiClientWindows versions 7.2.0 through 7.2.4 Fortinet FortiClientWindows version 7.4.0

Description The issue is related to an untrusted search path in Fortinet FortiClientWindows, which allows an attacker to run arbitrary code via DLL hijacking and social engineering. This can be exploited by an attacker to execute malicious code.

Recommendations For versions 7.0.0 through 7.0.12, consider disabling the vulnerable DLL loading functionality until a patch is available. For versions 7.2.0 through 7.2.4, restrict access to the affected search path to minimize the risk of exploitation. For version 7.4.0, avoid using the vulnerable search path in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2025-01172

CVE-2024-36507

Affected Products

Forticlient

References · 7

• https://bdu.fstec.ru/vul/2025-01172 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-36507 · Security Note
• https://osv.dev/vulnerability/CVE-2024-36507 · Vendor Advisory
• https://fortiguard.fortinet.com/psirt/FG-IR-24-205 · Vendor Advisory
• https://twitter.com/CVEnew/status/1856828059791626452 · Twitter Post
• https://fortiguard.fortinet.com/psirt/FG-IR-24-144 · Note
• https://twitter.com/VulmonFeeds/status/1856553441969222030 · Twitter Post