CVE-2023-45590

published 2024-04-09

CVE-2023-45590: An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows…

Priority P3 53 high 8.8 CVSS 3.1

AV N AC L PR N UI R S U C H I H A H

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website

Affected

10 ranges

Vendor	Product	Version range	Fixed in
fortinet	forticlient	—	—
fortinet	forticlient	—	—
fortinet	forticlient	—	—
fortinet	forticlient	—	—
fortinet	forticlient	>= 7.0.6 < 7.0.11	7.0.11
fortinet	forticlientlinux	—	—
fortinet	forticlientlinux	—	—
fortinet	forticlientlinux	7.0.3 – 7.0.4	—
fortinet	forticlientlinux	7.0.6 – 7.0.10	—
fortinet	fortinet	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94