VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 1, 2021· Updated Jun 17, 2026

CVE-2021-32592

CVE-2021-32592

Description

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

Affected products

7
  • Fortinet/Forticlient2 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*range: >=6.0.0,<=6.0.9
    • cpe:2.3:a:fortinet:forticlient:7.0.0:*:*:*:*:windows:*:*
  • Fortinet/Forticlient Enterprise Management Server2 versions
    cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:*:*:*:*:*:*:*:*range: >=6.0.0,<=6.0.6
    • cpe:2.3:a:fortinet:forticlient_enterprise_management_server:7.0.0:*:*:*:*:*:*:*
  • Fortinet/FortiClient Windowsllm-fuzzy
    Range: <=7.0.0, <=6.4.6, <=6.2.x, <=6.0.x
  • Fortinet/Forticlientemsllm-fuzzy2 versions
    <=7.0.0, <=6.4.6, <=6.2.x, <=6.0.x+ 1 more
    • (no CPE)range: <=7.0.0, <=6.4.6, <=6.2.x, <=6.0.x
    • (no CPE)range: FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x; FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.