PT-2025-24707 · Fortinet · Forticlientems

Published 2025-06-10 · Updated 2025-06-10 · CVE-2024-32119

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientEMS versions 7.2.4 and earlier, Fortinet FortiClientEMS version 7.4.0

Description The issue is related to an improper authentication flaw that allows an unauthenticated attacker, with knowledge of the targeted user's FCTUID and VDOM, to perform certain operations on behalf of the targeted user. This can be achieved by sending specially crafted TCP requests.

Recommendations For Fortinet FortiClientEMS versions 7.2.4 and earlier, and version 7.4.0, consider restricting access to the affected system until a patch is available. As a temporary workaround, consider disabling the ability to upload or tag files on behalf of other users until the issue is resolved. Avoid using the FCTUID and VDOM in unsecured communications to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-1390

CWE-287

Related Identifiers

BDU:2025-12651

CVE-2024-32119

Affected Products

Forticlientems

References · 6

• https://bdu.fstec.ru/vul/2025-12651 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-32119 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-23-375 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-32119 · Vendor Advisory
• https://twitter.com/CVEnew/status/1932512992626967015 · Twitter Post
• https://t.me/cvenotify/125299 · Telegram Post