CVE-2021-42754

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated…

Low · published November 2, 2021

CVSS v3.1
3.2
EPSS
0%
Percentile
36.0
In the wild
Unconfirmed
What it is

An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.

The record
Technical detail
CVSS v3.1
3.2 · LOW
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N/E:F/RL:X/RC:C
CVSS v4.0
Not supplied
EPSS
0.00427 · 36.0th percentile
Published
2021-11-02T18:56Z
EPSS history
Timeline
  • 02 NOV 18:56Z
    An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated…
    cvelistv5