CVE-2020-9290: High severity Fortinet FortiClient Windows vulnerability
An Unsafe Search Path vulnerability in FortiClient for Windows online installer 6.2.3 and below may allow a local attacker with control over the directory in which FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Ensure the directory containing FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe is protected so a local attacker cannot control it or upload malicious Filter Library DLL files to that directory.
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9290?
The severity of CVE-2020-9290 is high, with a CVSS score of 7.8.
How does CVE-2020-9290 affect FortiClient for Windows?
CVE-2020-9290 affects FortiClient for Windows online installer version 6.2.3 and below.
How does CVE-2020-9290 affect FortiClient Virtual Private Network (VPN)?
CVE-2020-9290 affects FortiClient Virtual Private Network (VPN) online installer version 6.2.3 and below.
How can a local attacker exploit CVE-2020-9290?
A local attacker with control over the directory where FortiClientOnlineInstaller.exe and FortiClientVPNOnlineInstaller.exe reside can upload malicious code to execute arbitrary code on the system.
Is there a fix available for CVE-2020-9290?
Updating to a version of FortiClient for Windows online installer and FortiClient Virtual Private Network (VPN) online installer that is above version 6.2.3 can fix this vulnerability.