VYPR
← All advisories
Unrated severityNVD Advisory· Published May 28, 2025· Updated Jan 14, 2026

CVE-2025-24473

CVE-2025-24473

Description

A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Fortinet/Forticlientcpe-rescue2 versions
    cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:fortinet:forticlientwindows:7.2.1:*:*:*:*:*:*:*range: 7.2.0
    • (no CPE)range: 7.2.0 <= version <= 7.2.1, 7.0.13 <= version <= 7.0.14

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.