High severity7.8NVD Advisory· Published Nov 14, 2023· Updated Jun 17, 2026
CVE-2023-41840
CVE-2023-41840
Description
A untrusted search path vulnerability in Fortinet FortiClientWindows 7.0.9 allows an attacker to perform a DLL Hijack attack via a malicious OpenSSL engine library in the search path.
Affected products
5cpe:2.3:a:fortinet:forticlient:7.0.9:*:*:*:*:windows:*:*+ 4 more
- cpe:2.3:a:fortinet:forticlient:7.0.9:*:*:*:*:windows:*:*
- cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:windows:*:*
- cpe:2.3:a:fortinet:forticlient:7.2.1:*:*:*:*:windows:*:*
- (no CPE)range: 7.0.9
- (no CPE)range: 7.2.0
Patches
Vulnerability mechanics
References
1- fortiguard.com/psirt/FG-IR-23-274nvdVendor Advisory
News mentions
0No linked articles in our index yet.