CVE-2021-43066: High severity fortinet forticlient ssl vpn vulnerability
A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-43066?
CVE-2021-43066 is a vulnerability that allows an attacker to escalate privilege in Fortinet FortiClientWindows versions 7.0.2 and below, 6.4.6 and below, 6.2.9 and below, and 6.0.10 and below via the MSI installer.
How severe is CVE-2021-43066?
CVE-2021-43066 has a severity value of 7.8, which is considered high.
How does CVE-2021-43066 affect Fortinet FortiClientWindows?
CVE-2021-43066 affects Fortinet FortiClientWindows versions 7.0.2 and below, 6.4.6 and below, 6.2.9 and below, and 6.0.10 and below.
How can an attacker exploit CVE-2021-43066?
An attacker can exploit CVE-2021-43066 by controlling the file name or path in the MSI installer.
Is there a fix available for CVE-2021-43066?
To fix CVE-2021-43066, update Fortinet FortiClientWindows to version 6.4.7 or above for versions 6.x, and version 7.0.3 or above for version 7.x.