Skip to content
fr Sign in
7.3 High

CVE-2022-43946 Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability…

Description

Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute commands via writing data into a windows pipe.

Affected products and versions

Product Affected versions Fixed in
FortiClientWindows 7.0 7.0.0 → 7.0.7 No fix stated
FortiClientWindows 6.4 6.4.0 → 6.4.10 No fix stated
FortiClientWindows 6.2 6.2.0 → 6.2.9 No fix stated
FortiClientWindows 6.0 6.0.0 → 6.0.10 No fix stated

References

Timeline

  1. Published
  2. Last modified

Other CVEs of FortiClientWindows

The 30 CVEs of FortiClientWindows →
CVE-2026-84386 A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all… 4.7 Medium CVE-2026-70465 A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows… 7.3 High CVE-2026-44278 A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,… 2.1 Low CVE-2025-62676 An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet… 6.4 Medium
Track this CVE