Medium WID-SEC-2025-2291 3 CVEs

Fortinet FortiClientMac: Mehrere Schwachstellen

Published Oct 14, 2025 · Updated Oct 14, 2025 · de-DE

Vendor: Fortinet Product: FortiClient Platform: macOS

Summary

Ein Angreifer kann mehrere Schwachstellen in Fortinet FortiClientMac ausnutzen, um beliebigen Programmcode auszuführen oder seine Rechte zu erweitern.

Product

FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.

Vulnerabilities 3

High 7.0

CVE-2025-57741

An Incorrect Permission Assignment for Critical Resource vulnerability [CWE-732] in FortiClientMac 7.4.0 through 7.4.3,…

Fortinet FortiClientMac Network devices

Oct 14, 2025
Medium 6.8

CVE-2025-46774

An Improper Verification of Cryptographic Signature vulnerability [CWE-347] in FortiClient MacOS installer version 7.4.…

Fortinet FortiClientMac Network devices

Oct 14, 2025
Medium 5.5

CVE-2025-31365

An Improper Control of Generation of Code ('Code Injection') vulnerability [CWE-94] in FortiClientMac 7.4.0 through 7.4…

Fortinet FortiClientMac Network devices

Oct 14, 2025

Revision history

2025-10-14 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-25-037 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-25-037
FortiGuard PSIRT Advisory FG-IR-25-126 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-25-126
FortiGuard PSIRT Advisory FG-IR-25-664 vom 2025-10-14
https://www.fortiguard.com/psirt/FG-IR-25-664