CVE-2019-5589

HIGH

FortiClient < 6.0.6 - Unauthenticated Remote Code Execution via DLL Hijacking

Title source: llm

Description

An Unsafe Search Path vulnerability in FortiClient Online Installer (Windows version before 6.0.6) may allow an unauthenticated, remote attacker with control over the directory in which FortiClientOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious .dll files in that directory.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_confirm

https://fortiguard.com/advisory/FG-IR-19-060

Scores

CVSS v3 7.8

EPSS 0.0062

EPSS Percentile 70.1%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-426

Status published

Products (1)

fortinet/forticlient < 6.0.6

Published May 28, 2019

Tracked Since Feb 18, 2026