CVE-2022-26113 HIGH

CVE-2022-26113

Vendor Fortinet
Product Fortinet FortiClientWindows
Published July 18, 2022
Last update October 22, 2024
View on NVD All CVEs

CVSS base score

7.7/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H/E:F/RL:U/RC:C

What the vulnerability does

01Description

An execution with unnecessary privileges vulnerability [CWE-250] in FortiClientWindows 7.0.0 through 7.0.3, 6.4.0 through 6.4.7, 6.2.0 through 6.2.9, 6.0.0 through 6.0.10 may allow a local attacker to perform an arbitrary file write on the system.

Key dates

02Disclosure timeline

July 18, 2022 CVE published
October 22, 2024 Record updated