NetSight
low3.2

CVE-2021-42754

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated at…

Impact

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.

Affected products

VendorProductAffected versions
FortinetForticlient
from 6.4.0 through 6.4.5
Version 7.0.0

Weakness classification

References