Medium WID-SEC-2025-2623 3 CVEs

Fortinet FortiClient (Windows): Mehrere Schwachstellen

Published Nov 18, 2025 · Updated Nov 18, 2025 · de-DE

Vendor: Fortinet Product: FortiClient Platform: Windows

Summary

Ein lokaler Angreifer kann mehrere Schwachstellen in Fortinet FortiClient ausnutzen, um beliebigen Programmcode auszuführen oder vertrauliche Informationen offenzulegen.

Product

FortiClient ist ein Endgeräteschutz mit einem integrierten VPN-Client.

Vulnerabilities 3

High 7.1

CVE-2025-46373

A Heap-based Buffer Overflow vulnerability [CWE-122] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, …

Fortinet FortiClientWindows Network devices

Nov 18, 2025
High 7.1

CVE-2025-47761

An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows …

Fortinet FortiClientWindows Network devices

Nov 18, 2025
Medium 4.9

CVE-2025-54660

An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through…

Fortinet FortiClientWindows Network devices

Nov 18, 2025

Revision history

2025-11-18 #1
Initiale Fassung

References

FortiGuard PSIRT Advisory FG-IR-25-125 vom 2025-11-18
https://www.fortiguard.com/psirt/FG-IR-25-125
FortiGuard PSIRT Advisory FG-IR-25-112 vom 2025-11-18
https://www.fortiguard.com/psirt/FG-IR-25-112
FortiGuard PSIRT Advisory FG-IR-25-844 vom 2025-11-18
https://www.fortiguard.com/psirt/FG-IR-25-844