CVE-2021-43066

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version…

High · published May 11, 2022

CVSS v3.1
8.4
EPSS
0%
Percentile
12.3
In the wild
Unconfirmed
What it is

A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.

The record
Technical detail
CVSS v3.1
8.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:H/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00224 · 12.3th percentile
Published
2022-05-11T15:40Z
EPSS history
Timeline
  • 11 MAY 15:40Z
    A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version…
    cvelistv5