CVE-2021-22127: An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated…

PriorityP345high8CVSS 3.1

AVAACLPRNUIRSUCHIHAH

EPSS

0.48%

37.9th percentile

An improper input validation vulnerability in FortiClient for Linux 6.4.x before 6.4.3, FortiClient for Linux 6.2.x before 6.2.9 may allow an unauthenticated attacker to execute arbitrary code on the host operating system as root via tricking the user into connecting to a network with a malicious name.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
fortinet	forticlient	< 6.2.9	6.2.9
fortinet	forticlient	—	—
fortinet	forticlient	>= 6.4.0 < 6.4.3	6.4.3
fortinet	fortinet_forticlientlinux	—	—

CVSS provenance

nvdv3.18.0HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.07.9HIGHAV:A/AC:M/Au:N/C:C/I:C/A:C

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.