Lucene search

FortinetCVE-2021-41028

HistoryDec 16, 2021 - 7:15 p.m.

CVE-2021-41028

2021-12-1619:15:08

CWE-798

CWE-295

fortinet

web.nvd.nist.gov

cve-2021-41028

use of hard-coded cryptographic key

improper certificate validation

forticlientems

forticlientwindows

forticlientlinux

forticlientmac

man-in-the-middle attack

nvd

telemetry protocol

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.2

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H/E:F/RL:U/RC:C

EPSS

0.001

Percentile

31.3%

JSON

A combination of a use of hard-coded cryptographic key vulnerability [CWE-321] in FortiClientEMS 7.0.1 and below, 6.4.6 and below and an improper certificate validation vulnerability [CWE-297] in FortiClientWindows, FortiClientLinux and FortiClientMac 7.0.1 and below, 6.4.6 and below may allow an unauthenticated and network adjacent attacker to perform a man-in-the-middle attack between the EMS and the FCT via the telemetry protocol.

Affected configurations

Nvd

Node

fortinetforticlientRange6.0.0–6.0.9macos

fortinetforticlientRange6.0.0–6.0.9windows

fortinetforticlientRange6.2.0–6.2.9linux

fortinetforticlientRange6.2.0–6.2.9macos

fortinetforticlientRange6.2.0–6.2.9windows

fortinetforticlientRange6.4.0–6.4.6linux

fortinetforticlientRange6.4.0–6.4.6macos

fortinetforticlientRange6.4.0–6.4.6windows

fortinetforticlientMatch7.0.0linux

fortinetforticlientMatch7.0.0macos

fortinetforticlientMatch7.0.0windows

fortinetforticlientMatch7.0.1linux

fortinetforticlientMatch7.0.1macos

fortinetforticlientMatch7.0.1windows

fortinetforticlient_endpoint_management_serverRange6.2.0–6.2.9

fortinetforticlient_endpoint_management_serverRange6.4.0–6.4.6

fortinetforticlient_endpoint_management_serverMatch7.0.0

fortinetforticlient_endpoint_management_serverMatch7.0.1

VendorProductVersionCPE
fortinetforticlient*cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:macos:*:*
fortinetforticlient*cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*
fortinetforticlient*cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*
fortinetforticlient7.0.0cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:linux:*:*
fortinetforticlient7.0.0cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:macos:*:*
fortinetforticlient7.0.0cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*
fortinetforticlient7.0.1cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:linux:*:*
fortinetforticlient7.0.1cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:macos:*:*
fortinetforticlient7.0.1cpe:2.3:a:fortinet:forticlient:7.0.1:*:*:*:*:windows:*:*
fortinetforticlient_endpoint_management_server*cpe:2.3:a:fortinet:forticlient_endpoint_management_server:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
fortinet	forticlient	*	cpe:2.3:a:fortinet:forticlient::::::macos::*
fortinet	forticlient	*	cpe:2.3:a:fortinet:forticlient::::::windows::*
fortinet	forticlient	*	cpe:2.3:a:fortinet:forticlient::::::linux::*
fortinet	forticlient	7.0.0	cpe:2.3:a:fortinet:forticlient:7.0.0:::::linux::
fortinet	forticlient	7.0.0	cpe:2.3:a:fortinet:forticlient:7.0.0:::::macos::
fortinet	forticlient	7.0.0	cpe:2.3:a:fortinet:forticlient:7.0.0:::::windows::
fortinet	forticlient	7.0.1	cpe:2.3:a:fortinet:forticlient:7.0.1:::::linux::
fortinet	forticlient	7.0.1	cpe:2.3:a:fortinet:forticlient:7.0.1:::::macos::
fortinet	forticlient	7.0.1	cpe:2.3:a:fortinet:forticlient:7.0.1:::::windows::
fortinet	forticlient_endpoint_management_server	*	cpe:2.3:a:fortinet:forticlient_endpoint_management_server::::::::

Rows per page:

1-10 of 121

CNA Affected

[
  {
    "product": "Fortinet FortiClientEMS, FortiClientWindows, FortiClientLinux, FortiClientMac",
    "vendor": "Fortinet",
    "versions": [
      {
        "status": "affected",
        "version": "FortiClientEMS 7.0.1 and below,  6.4.6 and below, FortiClientWindows, FortiClientLinux, FortiClientMac 7.0.1 and below,  6.4.6 and below."
      }
    ]
  }
]

References

fortiguard.com/advisory/FG-IR-21-075

Social References

CVSS2

5.4

Attack Vector

ADJACENT_NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:A/AC:M/Au:N/C:P/I:P/A:P

CVSS3

8.2

Attack Vector

ADJACENT

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:L/I:H/A:H/E:F/RL:U/RC:C

EPSS

0.001

Percentile

31.3%

JSON

Related for CVE-2021-41028