NetSight
high8.2

CVE-2021-44169

A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below…

Impact

A improper initialization in Fortinet FortiClient (Windows) version 6.0.10 and below, version 6.2.9 and below, version 6.4.7 and below, version 7.0.3 and below allows attacker to gain administrative privileges via placing a malicious executable inside the FortiClient installer's directory.

Affected products

VendorProductAffected versions
FortinetForticlient
from 6.0.0 through 6.0.10
from 6.2.0 through 6.2.9
from 6.4.0 through 6.4.7
from 7.0.0 through 7.0.2

Weakness classification

References