CVE-2021-41031 HIGH

CVE-2021-41031

Vendor Fortinet
Product Fortinet FortiClientWindows
Published July 18, 2022
Last update October 25, 2024

CVSS base score

7.8/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:X/RL:X/RC:X

What the vulnerability does

01Description

A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for FortiESNAC service.

Key dates

02Disclosure timeline

July 18, 2022 CVE published
October 25, 2024 Record updated