Lucene search

FortinetCVE-2020-9287

HistoryMar 15, 2020 - 10:15 p.m.

CVE-2020-9287

2020-03-1522:15:15

CWE-427

fortinet

web.nvd.nist.gov

cve-2020-9287

forticlient

ems

online installer

vulnerability

arbitrary code execution

nvd

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.3%

JSON

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

Affected configurations

Nvd

Node

fortinetforticlient_emergency_management_serverRange≤6.2.1

VendorProductVersionCPE
fortinetforticlient_emergency_management_server*cpe:2.3:a:fortinet:forticlient_emergency_management_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	forticlient_emergency_management_server	*	cpe:2.3:a:fortinet:forticlient_emergency_management_server::::::::

CNA Affected

[
  {
    "product": "Fortinet FortiClient EMS",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "6.2.1 and below"
      }
    ]
  }
]

References

fortiguard.com/psirt/FG-IR-19-060

CVSS2

6.9

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:M/Au:N/C:C/I:C/A:C

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

30.3%

JSON

Related for CVE-2020-9287