CVE-2023-45590

CRITICAL

FortiClientLinux 7.2.0, 7.0.6-7.0.10, 7.0.3-7.0.4 - Remote Code Execution via Malicious Website

Title source: llm

Description

An improper control of generation of code ('code injection') in Fortinet FortiClientLinux version 7.2.0, 7.0.6 through 7.0.10 and 7.0.3 through 7.0.4 allows attacker to execute unauthorized code or commands via tricking a FortiClientLinux user into visiting a malicious website

References (1)

Core 1

Core References

Vendor Advisory

https://fortiguard.com/psirt/FG-IR-23-087

Scores

CVSS v3 9.6

EPSS 0.0077

EPSS Percentile 73.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-94

Status published

Products (4)

fortinet/forticlient 7.0.3

fortinet/forticlient 7.0.4

fortinet/forticlient 7.2.0

fortinet/forticlient 7.0.6 - 7.0.11

Published Apr 09, 2024

Tracked Since Feb 18, 2026