Description
A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped.
Scores
CVSS v3
3.3
EPSS
0.0011
EPSS Percentile
29.8%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
partial
Details
CWE
CWE-321
CWE-798
Status
published
Products (2)
fortinet/forticlient
7.4.0
fortinet/forticlient
6.4.0 - 7.2.9
Published
Jan 14, 2025
Tracked Since
Feb 18, 2026