PT-2025-47351 · Fortinet · Forticlientwindows+1

Published 2025-11-18 · Updated 2025-11-19 · CVE-2025-46373

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fortinet FortiClientWindows versions 7.2.0 through 7.2.8 Fortinet FortiClientWindows versions 7.4.0 through 7.4.3

Description A heap-based buffer overflow exists in Fortinet FortiClientWindows. A local IPSec user with authentication may be able to execute arbitrary code or commands through the 'fortips 74.sys' file. Successful exploitation requires bypassing Windows heap integrity protections.

Recommendations Update FortiClientWindows to a version later than 7.4.3. Update FortiClientWindows to a version later than 7.2.8.

Fix

Heap Based Buffer Overflow

Weakness Enumeration

CWE-122

Related Identifiers

BDU:2025-14861

CVE-2025-46373

Affected Products

Forticlientwindows

Fortips 74.Sys

References · 7

• https://osv.dev/vulnerability/CVE-2025-46373 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-46373 · Security Note
• https://fortiguard.fortinet.com/psirt/FG-IR-25-125 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14861 · Security Note
• https://twitter.com/CVEnew/status/1991042972398371048 · Twitter Post
• https://t.me/CVEtracker/37629 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1990912891202028026 · Twitter Post