high7.2Public exploit code
CVE-2015-5736
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback fun…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Fortinet FortiClient 5.2.3 (Windows 10 x64 Creators) - Local Privilege Escalation2018-08-05 · local · windows_x86-64 · Verified
- Fortinet FortiClient 5.2.3 (Windows 10 x64 Post-Anniversary) - Local Privilege Escalation2017-03-25 · local · windows_x86-64 · Verified
- Fortinet FortiClient 5.2.3 (Windows 10 x64 Pre-Anniversary) - Local Privilege Escalation2017-03-25 · local · windows_x86-64 · Verified
Impact
The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Fortinet | Forticlient | through 5.2.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient
- http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html
- http://seclists.org/fulldisclosure/2015/Sep/0
- http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities
- http://www.fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient
- http://www.securityfocus.com/archive/1/536369/100/0/threaded
- http://www.securitytracker.com/id/1033439
- https://www.exploit-db.com/exploits/41721/
- https://www.exploit-db.com/exploits/41722/
- https://www.exploit-db.com/exploits/45149/
- http://fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient
- http://packetstormsecurity.com/files/133398/FortiClient-Antivirus-Information-Exposure-Access-Control.html
- http://seclists.org/fulldisclosure/2015/Sep/0
- http://www.coresecurity.com/advisories/forticlient-antivirus-multiple-vulnerabilities
- http://www.fortiguard.com/advisory/mulitple-vulnerabilities-in-forticlient
- http://www.securityfocus.com/archive/1/536369/100/0/threaded
- http://www.securitytracker.com/id/1033439
- https://www.exploit-db.com/exploits/41721/
- https://www.exploit-db.com/exploits/41722/
- https://www.exploit-db.com/exploits/45149/