Fortinet FortiClient VPN Improper Access Control Remote Code Execution Vulnerability
Vulnerability Details
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Fortinet FortiClient VPN. Authentication is required to exploit this vulnerability.
The specific flaw exists within the FortiClient Logging daemon. The product applies insufficient access controls to a sensitive pipe. A remote attacker can leverage this vulnerability to execute code in the context of SYSTEM. Additionally, a local attacker can leverage this vulnerability to escalate privileges and execute code in the context of SYSTEM.
Additional Details
Fortinet has issued an update to correct this vulnerability. More details can be found at:
https://www.fortiguard.com/psirt/FG-IR-22-429
Disclosure Timeline
- 2022-10-31 - Vulnerability reported to vendor
- 2023-08-14 - Coordinated public release of advisory
Credit
Ting
