CVE-2022-42470

CVSS V2 None CVSS V3 None
Description
A relative path traversal vulnerability in Fortinet FortiClient (Windows) 7.0.0 - 7.0.7, 6.4.0 - 6.4.9, 6.2.0 - 6.2.9 and 6.0.0 - 6.0.10 allows an attacker to execute unauthorized code or commands via sending a crafted request to a specific named pipe.
Overview
  • CVE ID
  • CVE-2022-42470
  • Assigner
  • psirt@fortinet.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2023-04-11T17:15:07
  • Last Modified Date
  • 2023-04-18T19:54:55
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* 1 OR 6.0.0 6.0.10
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* 1 OR 6.2.0 6.2.9
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* 1 OR 6.4.0 6.4.9
cpe:2.3:a:fortinet:forticlient:*:*:*:*:*:windows:*:* 1 OR 7.0.0 7.0.8
References
Reference URL Reference Tags
https://fortiguard.com/psirt/FG-IR-22-320
History
Created Old Value New Value Data Type Notes
2023-04-17 04:31:05 Added to TrackCVE
2023-04-17 14:00:55 Awaiting Analysis Undergoing Analysis Vulnerability Status updated
2023-04-18 20:00:54 2023-04-18T19:54:55 CVE Modified Date updated
2023-04-18 20:00:54 Undergoing Analysis Analyzed Vulnerability Status updated
2023-04-18 20:00:55 Weakness Enumeration new
2023-04-18 20:00:57 CPE Information updated