CVE-2024-36513: High severity fortinet forticlient ssl vpn vulnerability
A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-36513?
CVE-2024-36513 is considered a medium severity vulnerability that can lead to privilege escalation.
How do I fix CVE-2024-36513?
To fix CVE-2024-36513, update your FortiClient Windows version to 7.2.5 or later, 7.0.13 or later, or 6.4.10 or later.
What products are affected by CVE-2024-36513?
CVE-2024-36513 affects FortiClient Windows versions 7.2.4 and below, 7.0.12 and below, and all versions of 6.4.
Can CVE-2024-36513 be exploited remotely?
CVE-2024-36513 requires authentication, meaning an attacker must have valid credentials to exploit this vulnerability.
What types of attacks can result from CVE-2024-36513?
CVE-2024-36513 can be exploited to allow authenticated users to escalate their privileges, potentially leading to unauthorized actions on the system.