PT-2024-27041 · Fortinet · Forticlientwindows

Published 2024-11-12 · Updated 2025-01-12 · CVE-2024-36513

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiClient Windows versions 7.2.4 and below FortiClient Windows version 7.0.12 and below FortiClient Windows version 6.4

Description A privilege context switching error vulnerability in FortiClient Windows may allow an authenticated user to escalate their privileges via lua auto patch scripts. This issue is related to errors in switching the context of privileges.

Recommendations For FortiClient Windows versions 7.2.4 and below, update to a version above 7.2.4 to resolve the issue. For FortiClient Windows version 7.0.12 and below, update to a version above 7.0.12 to resolve the issue. For FortiClient Windows version 6.4, consider upgrading to a newer version to mitigate the risk of exploitation, as all versions of 6.4 are affected. As a temporary workaround, consider restricting access to lua auto patch scripts until a patch is available.

Fix

Weakness Enumeration

CWE-270

Related Identifiers

BDU:2025-01171

CVE-2024-36513

Affected Products

Forticlientwindows

References · 9

• https://osv.dev/vulnerability/CVE-2024-36513 · Vendor Advisory
• https://fortiguard.fortinet.com/psirt/FG-IR-24-144 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-36513 · Security Note
• https://bdu.fstec.ru/vul/2025-01171 · Security Note
• https://twitter.com/fletch_ai/status/1856925170910597199 · Twitter Post
• https://twitter.com/CVEnew/status/1856828064027873572 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1856558562152960278 · Twitter Post
• https://twitter.com/UndercodeNews/status/1857267395020063050 · Twitter Post
• https://twitter.com/SecuriTricks/status/1857317837229957354 · Twitter Post