CVE-2021-43066high

CVE-2021-43066: high-severity vulnerability in Fortinet FortiClientWindows

Published · Updated

Follow this CVE+ Monitor FortiClientWindows

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.4epss 0.2%
A external control of file name or path in Fortinet FortiClientWindows version 7.0.2 and below, version 6.4.6 and below, version 6.2.9 and below, version 6.0.10 and below allows attacker to escalate privilege via the MSI installer.
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H/E:H/RL:U/RC:C
Affected products
Fortinet · Fortinet FortiClientWindows
Related CVEs — Fortinet FortiClientWindows

In the same product, most dangerous first.

CVE-2019-17658—CVE-2019-17658EPSS 2.2%CVE-2021-36167MEDIUMCVE-2021-36167EPSS 0.6%CVE-2021-41031HIGHCVE-2021-41031EPSS 0.5%CVE-2021-44169HIGHCVE-2021-44169EPSS 0.4%CVE-2021-43204MEDIUMCVE-2021-43204EPSS 0.4%CVE-2021-36183HIGHCVE-2021-36183EPSS 0.3%