CVE-2024-35281

low Fortinet
CVSS v3 Base Score
2.5
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
EPSS Score
0.1%
Exploitation probability in 30 days
Top 82% most likely to be exploited
Attack Characteristics
Attack Vector
Local
Attack Complexity
High
Privileges Required
Low
User Interaction
None
Confidentiality
None
Integrity
Low
Availability
None
Published: May 13, 2025 (365 days ago)
Last Modified: February 5, 2026
Vendor: Fortinet

Description

An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables.

CWE

CWE-653

Affected Products

fortinet forticlientfortinet fortifone softclient

References

🔗 fortiguard.fortinet.com