CVE-2017-7344
Last modified
CVE-2017-7344 is a vulnerability of currently unknown severity. A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.. EPSS estimates a 1.85% chance of exploitation in the next 30 days.
Description
A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows "security alert" dialog thereby popping up when the "VPN before logon" feature is enabled and an untrusted certificate chain.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Forticlient | <= 5.4.3 |
| Fortinet | Forticlient | 5.6.0 |
References
- http://www.securityfocus.com/bid/102176Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-070Vendor Advisory
- https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/Exploit, Mitigation, Third Party Advisory
- http://www.securityfocus.com/bid/102176Third Party Advisory, VDB Entry
- https://fortiguard.com/advisory/FG-IR-17-070Vendor Advisory
- https://securite.intrinsec.com/2017/12/22/cve-2017-7344-fortinet-forticlient-windows-privilege-escalation-at-logon/Exploit, Mitigation, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-7344?
How severe is CVE-2017-7344?
How do I fix CVE-2017-7344?
Are you affected by CVE-2017-7344?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST