High WID-SEC-2025-0071 4 CVEs

Fortinet FortiClient: Mehrere Schwachstellen

Published Jan 14, 2025 · Updated Jan 14, 2025 · de-DE

Vendor: Fortinet Product: FortiClient Platform: Windows

Summary

Ein entfernter, anonymer oder lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiClient ausnutzen, um Sicherheitsvorkehrungen zu umgehen oder Informationen offenzulegen.

Product

FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.

Vulnerabilities 4

High 7.7

CVE-2024-23106

An improper restriction of excessive authentication attempts [CWE-307] in FortiClientEMS version 7.2.0 through 7.2.4 an…

Fortinet FortiClientEMS Network devices

Jan 14, 2025
Medium 4.9

CVE-2024-36510

An observable response discrepancy vulnerability [CWE-204] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versio…

Fortinet FortiClientEMS FortiSOAR Network devices

Jan 14, 2025
Low 3.5

CVE-2024-36506

An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 th…

Fortinet FortiClientEMS Network devices

Jan 14, 2025
Low 3.2

CVE-2024-50564

A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versi…

Fortinet FortiClientWindows Network devices

Jan 14, 2025

Revision history

2025-01-14 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-23-476 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-23-476
FortiGuard PSIRT Advisory FG-IR-24-078 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-078
FortiGuard PSIRT Advisory FG-IR-24-216 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-216
FortiGuard PSIRT Advisory FG-IR-24-216 vom 2025-01-14
https://www.fortiguard.com/psirt/FG-IR-24-071