CVE-2021-32592
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - psirt@fortinet.com
- Published
- 2021-12-01
- Last modified
- 2024-10-25
- Weaknesses
- CWE-427
Affected products
- Forticlient (Fortinet)
- Forticlient Enterprise Management Server (Fortinet)
- Forticlientems (Fortinet)
- Fortinet Forticlientwindows (Fortinet)
References
- https://fortiguard.com/advisory/FG-IR-21-088
