VYPR
← All advisories
Critical severity9.6NVD Advisory· Published Apr 9, 2024· Updated Jun 17, 2026

CVE-2023-45590

CVE-2023-45590

Description

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website

Affected products

6
  • Fortinet/Forticlient6 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*+ 5 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:linux:*:*range: >=7.0.6,<7.0.11
    • cpe:2.3:a:fortinet:forticlient:7.0.3:*:*:*:*:linux:*:*
    • cpe:2.3:a:fortinet:forticlient:7.0.4:*:*:*:*:linux:*:*
    • cpe:2.3:a:fortinet:forticlient:7.2.0:*:*:*:*:linux:*:*
    • (no CPE)range: 7.2.0, 7.0.3-7.0.4, 7.0.6-7.0.10
    • (no CPE)range: 7.2.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.