VYPR
← All advisories
High severity7.5NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026

CVE-2022-43946

CVE-2022-43946

Description

Multiple vulnerabilities including an incorrect permission assignment for critical resource [CWE-732] vulnerability and a time-of-check time-of-use (TOCTOU) race condition [CWE-367] vulnerability in Fortinet FortiClientWindows before 7.0.7 allows attackers on the same file sharing network to execute commands via writing data into a windows pipe.

Affected products

3
  • Fortinet/Forticlient2 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*range: >=6.0.0,<7.0.8
    • (no CPE)range: 7.0.0
  • Fortinet/FortiClient Windowsllm-fuzzy
    Range: <7.0.7

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.