Fortinet FortiClientEMS CSV Injection Vulnerability

Fortinet FortiClientEMS is part of Fortinet’s Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. Fortinet FortiClientEMS suffers from a CSV injection vulnerability that stems from incorrectly neutralizing a formula element in a csv file. An attacker could use this vulnerability to execute unauthorized code or commands via specially crafted packets.