Lucene search

[email protected]CVE-2021-43204

HistoryDec 09, 2021 - 9:15 a.m.

CVE-2021-43204

2021-12-0909:15:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2021-43204

fortinet

forticlient

windows

denial of service

directory access permissions

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

12.3%

JSON

A improper control of a resource through its lifetime in Fortinet FortiClientWindows version 6.4.1 and 6.4.0, version 6.2.9 and below, version 6.0.10 and below allows attacker to cause a complete denial of service of its components via changes of directory access permissions.

CPENameOperatorVersion
fortinet:forticlientfortinet forticlientle6.2.9
fortinet:forticlientfortinet forticlienteq4.2.7
fortinet:forticlientfortinet forticlienteq4.2.6
fortinet:forticlientfortinet forticlienteq4.2.5
fortinet:forticlientfortinet forticlienteq4.2.4
fortinet:forticlientfortinet forticlienteq4.2.3
fortinet:forticlientfortinet forticlienteq4.2.2
fortinet:forticlientfortinet forticlienteq4.2.1
fortinet:forticlientfortinet forticlienteq4.2.0
fortinet:forticlientfortinet forticlienteq4.1.3

CPE	Name	Operator	Version
fortinet:forticlient	fortinet forticlient	le	6.2.9
fortinet:forticlient	fortinet forticlient	eq	4.2.7
fortinet:forticlient	fortinet forticlient	eq	4.2.6
fortinet:forticlient	fortinet forticlient	eq	4.2.5
fortinet:forticlient	fortinet forticlient	eq	4.2.4
fortinet:forticlient	fortinet forticlient	eq	4.2.3
fortinet:forticlient	fortinet forticlient	eq	4.2.2
fortinet:forticlient	fortinet forticlient	eq	4.2.1
fortinet:forticlient	fortinet forticlient	eq	4.2.0
fortinet:forticlient	fortinet forticlient	eq	4.1.3

Rows per page:

1-10 of 361

References

fortiguard.com/advisory/FG-IR-21-167

4.4 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

4.7 Medium

AI Score

Confidence

High

4.9 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:N/I:N/A:C

0.0004 Low

EPSS

Percentile

12.3%

JSON

Related for CVE-2021-43204

cvelist1 prion1 fortinet1