CVE-2024-36506

🗓️ 14 Jan 2025 14:09:52Reported by fortinetType

Remote attacker can exploit improper verification vulnerability in FortiClientEMS to bypass security.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2024-36506	14 Jan 202514:17	–	circl
CNNVD	Fortinet FortiClientEMS 安全漏洞	14 Jan 202500:00	–	cnnvd
CNVD	Fortinet FortiClientEMS Input Validation Error Vulnerability	23 Jan 202500:00	–	cnvd
Cvelist	CVE-2024-36506	14 Jan 202514:09	–	cvelist
EUVD	EUVD-2024-36368	3 Oct 202520:07	–	euvd
NVD	CVE-2024-36506	14 Jan 202514:15	–	nvd
OSV	CVE-2024-36506	14 Jan 202514:15	–	osv
Positive Technologies	PT-2025-2454 · Fortinet · Forticlientems	14 Jan 202500:00	–	ptsecurity
RedhatCVE	CVE-2024-36506	23 May 202508:16	–	redhatcve
Vulnrichment	CVE-2024-36506	14 Jan 202514:09	–	vulnrichment

NVD

Node

fortinet forticlientemsRange6.4.0–7.2.5

fortinet forticlientemsMatch7.4.0

fortinet forticlientems_cloudRange6.4.0–7.2.5

fortinet forticlientems_cloudMatch7.4.0

[
  {
    "vendor": "Fortinet",
    "product": "FortiClientEMS",
    "cpes": [],
    "defaultStatus": "unaffected",
    "versions": [
      {
        "version": "7.4.0",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.2.0",
        "lessThanOrEqual": "7.2.4",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "7.0.0",
        "lessThanOrEqual": "7.0.13",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.7",
        "lessThanOrEqual": "6.4.9",
        "status": "affected"
      },
      {
        "versionType": "semver",
        "version": "6.4.0",
        "lessThanOrEqual": "6.4.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
fortiguard	www.fortiguard.fortinet.com/psirt/FG-IR-24-078

31 Jan 2025 17:10Current

4.2Medium risk

Vulners AI Score4.2

CVSS 3.13.7 - 5.3

EPSS0.00152

SSVC

CWE-940