CVE-2019-17658

CVE Database · CVE-2019-17658

CVE-2019-17658

· CRITICALModified

CVSS v3.1

9.8

EPSS

2.18%

Published

Mar 12, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-428

Affected Products (2)

fortinet · forticlientvulnerable

References (2)

https://fortiguard.com/advisory/FG-IR-19-281

Vendor Advisory

https://fortiguard.com/advisory/FG-IR-19-281

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs