CVE-2024-47574 HIGH

CVE-2024-47574

Vendor Fortinet
Product FortiClientWindows
Weakness CWE-288
Published November 13, 2024
Last update November 13, 2024

CVSS base score

7.4/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:U/RC:C

What the vulnerability does

01Description

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.

Key dates

02Disclosure timeline

November 13, 2024 CVE published
November 13, 2024 Record updated