Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-36513

A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.

Published

2024-11-12T19:15:10.633

Last Modified

2024-11-14T20:35:26.093

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 8.2 (HIGH)

Weaknesses
  • Type: Primary
    CWE-270
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application fortinet forticlient ≤ 6.4.10 Yes
Application fortinet forticlient < 7.0.13 Yes
Application fortinet forticlient < 7.2.5 Yes
References