CVE-2022-40682

CWE-863 — Incorrect Authorization4 documents4 sources

Severity

7.8HIGH

EPSS

0.1%

top 80.88%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Fortinet Forticlient Fortinet Forticlientwindows

Timeline

PublishedApr 11

Description

A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or commands via sending a crafted request to a specific named pipe.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5fortinet/forticlientwindows7.0.0 — 7.0.7+3

▶NVDfortinet/forticlient7.0.0 — 7.0.8+3

🔴Vulnerability Details

GHSA

GHSA-2gp6-v2j8-wm92: A incorrect authorization in Fortinet FortiClient (Windows) 7↗2023-04-11

▶

CVEList

CVE-2022-40682: A incorrect authorization in Fortinet FortiClient (Windows) 7↗2023-04-11

▶

📋Vendor Advisories

Fortinet

A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0...↗2023-04-11

▶