CVE-2022-40681: High severity fortinet forticlient ssl vpn vulnerability
A incorrect authorization in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to cause denial of service via sending a crafted request to a specific named pipe.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2022-40681?
CVE-2022-40681 is a vulnerability in Fortinet FortiClient (Windows) that allows an attacker to cause denial of service.
What is the severity of CVE-2022-40681?
CVE-2022-40681 has a severity value of 7.1 (high).
Which versions of Fortinet FortiClient (Windows) are affected by CVE-2022-40681?
Fortinet FortiClient (Windows) versions 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9, and 6.0.0 - 6.0.10 are affected by CVE-2022-40681.
How can an attacker exploit CVE-2022-40681?
An attacker can exploit CVE-2022-40681 by sending a crafted request to a specific named pipe.
Is there a fix for CVE-2022-40681?
Fortinet has released a security advisory with mitigation steps for CVE-2022-40681. Please refer to the FortiGuard advisory for more information.