CVE-2017-7344
A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.85%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.
- CVSS 3.0
- 8.1 HIGHCVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.85% probability · 78th percentile
- CISA KEV
- Not listed
- Affected
- fortinet/forticlient
- Source
- psirt@fortinet.com
References
- http://www.securityfocus.com/bid/102176Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-070Vendor Advisory
- https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/Exploit, Mitigation, Third Party Advisory
- http://www.securityfocus.com/bid/102176Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-070Vendor Advisory
- https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/Exploit, Mitigation, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.