VYPR
← All advisories
Low severity3.7NVD Advisory· Published May 28, 2025· Updated Jun 17, 2026

CVE-2025-24473

CVE-2025-24473

Description

A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Fortinet/Forticlient2 versions
    cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:*range: >=7.2.0,<7.2.2
    • cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*range: 7.2.0
  • Fortinet/FortiClient Windowsllm-fuzzy
    Range: 7.2.0 - 7.2.1, 7.0.13 - 7.0.14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.