Lucene search

[email protected]CVE-2018-9193

HistoryMay 30, 2019 - 5:29 p.m.

CVE-2018-9193

2019-05-3017:29:00

[email protected]

web.nvd.nist.gov

cve-2018-9193

fortinet

forticlient

windows

privilege escalation

unauthorized code execution

nvd

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

15.8%

JSON

A local privilege escalation in Fortinet FortiClient for Windows 6.0.4 and earlier allows attacker to execute unauthorized code or commands via the parsing of the file.

Affected configurations

NVD

Node

fortinetforticlientRange≤6.0.4windows

CPENameOperatorVersion
fortinet:forticlientfortinet forticlientle6.0.4

CPE	Name	Operator	Version
fortinet:forticlient	fortinet forticlient	le	6.0.4

CNA Affected

[
  {
    "product": "Fortinet FortiClient for Windows",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.0.4 and earlier"
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-18-108

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

15.8%

JSON

Related for CVE-2018-9193

prion1 cvelist1 nvd1