VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 1, 2021· Updated Oct 25, 2024

CVE-2021-32592

CVE-2021-32592

Description

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

Affected products

3
  • Fortinet/Forticlientemsllm-fuzzy2 versions
    7.0.0, <=6.4.6, 6.2.x, 6.0.x+ 1 more
    • (no CPE)range: 7.0.0, <=6.4.6, 6.2.x, 6.0.x
    • (no CPE)range: FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x; FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x
  • Fortinet/Forticlientllm-fuzzy
    Range: 7.0.0, <=6.4.6, 6.2.x, 6.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.