CVE-2021-41028
First published: Thu Dec 16 2021(Updated: )
A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol.
Credit: psirt@fortinet.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Fortinet Forticlient | >=6.0.0<=6.0.9 | |
| Fortinet FortiClient Windows | >=6.0.0<=6.0.9 | |
| Fortinet Forticlient | >=6.2.0<=6.2.9 | |
| Fortinet Forticlient | >=6.2.0<=6.2.9 | |
| Fortinet FortiClient Windows | >=6.2.0<=6.2.9 | |
| Fortinet Forticlient | >=6.4.0<=6.4.6 | |
| Fortinet Forticlient | >=6.4.0<=6.4.6 | |
| Fortinet FortiClient Windows | >=6.4.0<=6.4.6 | |
| Fortinet Forticlient | =7.0.0 | |
| Fortinet Forticlient | =7.0.0 | |
| Fortinet FortiClient Windows | =7.0.0 | |
| Fortinet Forticlient | =7.0.1 | |
| Fortinet Forticlient | =7.0.1 | |
| Fortinet FortiClient Windows | =7.0.1 | |
| Fortinet Forticlient Endpoint Management Server | >=6.2.0<=6.2.9 | |
| Fortinet Forticlient Endpoint Management Server | >=6.4.0<=6.4.6 | |
| Fortinet Forticlient Endpoint Management Server | =7.0.0 | |
| Fortinet Forticlient Endpoint Management Server | =7.0.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-41028.
What software products are affected by this vulnerability?
FortiClientEMS 7.0.1 and below, 6.4.6 and below, FortiClientWindows, FortiClientLinux, and FortiClientMac 7.0.1 and below, 6.4.6 and below.
What is the severity of CVE-2021-41028?
The severity of CVE-2021-41028 is high.
What is the Common Weakness Enumeration (CWE) ID for this vulnerability?
The CWE ID for this vulnerability is CWE-321 and CWE-297.
How can I fix this vulnerability?
To fix this vulnerability, update FortiClientEMS, FortiClientWindows, FortiClientLinux, and FortiClientMac to versions higher than 7.0.1 or 6.4.6.
- collector/nvd-index
- agent/severity
- agent/author
- agent/references
- agent/weakness
- agent/description
- agent/type
- agent/event
- agent/tags
- agent/softwarecombine
- agent/last-modified-date
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- vendor/fortinet
- canonical/fortinet forticlient
- version/fortinet forticlient/6.0.0
- version/fortinet forticlient/6.0.9
- canonical/fortinet forticlient windows
- version/fortinet forticlient windows/6.0.0
- version/fortinet forticlient windows/6.0.9
- version/fortinet forticlient/6.2.0
- version/fortinet forticlient/6.2.9
- version/fortinet forticlient windows/6.2.0
- version/fortinet forticlient windows/6.2.9
- version/fortinet forticlient/6.4.0
- version/fortinet forticlient/6.4.6
- version/fortinet forticlient windows/6.4.0
- version/fortinet forticlient windows/6.4.6
- version/fortinet forticlient/7.0.0
- version/fortinet forticlient windows/7.0.0
- version/fortinet forticlient/7.0.1
- version/fortinet forticlient windows/7.0.1
- canonical/fortinet forticlient endpoint management server
- version/fortinet forticlient endpoint management server/6.2.0
- version/fortinet forticlient endpoint management server/6.2.9
- version/fortinet forticlient endpoint management server/6.4.0
- version/fortinet forticlient endpoint management server/6.4.6
- version/fortinet forticlient endpoint management server/7.0.0
- version/fortinet forticlient endpoint management server/7.0.1