7.4
High
CVE-2024-47574 A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions…
Description
A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| FortiClientWindows | 7.4.0 | No fix stated |
| FortiClientWindows 7.2 | 7.2.0 → 7.2.4 | No fix stated |
| FortiClientWindows 7.0 | 7.0.0 → 7.0.12 | No fix stated |
| FortiClientWindows 6.4 | 6.4.0 → 6.4.10 | No fix stated |
References
- fortiguard.fortinet.com fortiguard.fortinet.com
Timeline
- Published
- Last modified
Other CVEs of FortiClientWindows
The 30 CVEs of FortiClientWindows →
CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all…
4.7
Medium
CVE-2026-70465
A buffer copy without checking size of input ('classic buffer overflow') vulnerability in Fortinet FortiClientWindows…
7.3
High
CVE-2026-44278
A use of hard-coded cryptographic key vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.2,…
2.1
Low
CVE-2025-62676
An Improper Link Resolution Before File Access ('Link Following') vulnerability [CWE-59] vulnerability in Fortinet…
6.4
Medium