CVE-2020-9287
published 2020-03-15CVE-2020-9287: A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
PriorityP334high7.8CVSS 3.1
AVLACLPRNUIRSUCHIHAH
EPSS
0.42%
35.0th percentile
A untrusted search path vulnerability in Fortinet may allow attacker to execute unauthorized code or commands via network exploitable
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| fortinet | forticlient | — | — |
| fortinet | forticlient_emergency_management_server | <= 6.2.1 | — |
| fortinet | forticlientemergencymanagementserver | — | — |
| fortinet | forticlientems | — | — |
| fortinet | forticlientems | 06.00.00 – 06.00.06 | — |
| fortinet | forticlientems | 06.02.00 – 06.02.01 | — |
| fortinet | forticlientems | >= 6.0.0 < 6.0.* | 6.0.* |
| fortinet | forticlientemsonlineinstaller | — | — |
| fortinet | forticlientonlineinstaller | — | — |
| fortinet | forticlientvirtualprivatenetwork | — | — |
| fortinet | forticlientvpnonlineinstaller | — | — |
CVSS provenance
nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvdv2.06.9MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
Fortinet FortiClient EMS up to 6.2.1 Online Installer FortiClientEMSOnlineInstaller.exe Search Path uncontrolled search path
vuldb·2026-10-13·CVSS 7.8
CVE-2020-9287 [HIGH] Fortinet FortiClient EMS up to 6.2.1 Online Installer FortiClientEMSOnlineInstaller.exe Search Path uncontrolled search path
A vulnerability was found in Fortinet FortiClient EMS up to 6.2.1. It has been classified as critical. The impacted element is an unknown function of the file FortiClientEMSOnlineInstaller.exe of the component Online Installer. Performing a manipulation as part of Search Path results in uncontrolled search path.
This vulnerability was named CVE-2020-9287. The attack needs to be approached locally. There is no available exploit.
GHSA
GHSA-jf9v-69vw-p2r3: An Unsafe Search Path vulnerability in FortiClient EMS online installer 6
ghsa_unreviewed·2022-05-24
CVE-2020-9287 [MEDIUM] GHSA-jf9v-69vw-p2r3: An Unsafe Search Path vulnerability in FortiClient EMS online installer 6
An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
Fortinet
An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthen...
vendor_fortinet·2019-05-28·CVSS 7.8
CVE-2019-5589 [HIGH] CWE-426 An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthen...
FG-IR-19-060: An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthen...
An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files in that directory.
An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
An Unsafe Search Path vulnerabilit
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2020-03-15
Published