Vulnerability Description
An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fortinet | Forticlient | >= 6.0.0, <= 6.0.9 |
| Fortinet | Forticlient Enterprise Management Server | >= 6.0.0, <= 6.0.6 |
Related Weaknesses (CWE)
References
- https://fortiguard.com/advisory/FG-IR-21-088Vendor Advisory
- https://fortiguard.com/advisory/FG-IR-21-088Vendor Advisory
FAQ
What is CVE-2021-32592?
CVE-2021-32592 is a vulnerability with a CVSS score of 7.8 (HIGH). An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack att...
How severe is CVE-2021-32592?
CVE-2021-32592 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-32592?
Check the references section above for vendor advisories and patch information. Affected products include: Fortinet Forticlient, Fortinet Forticlient Enterprise Management Server.