CVE-2017-7344

Description

A privilege escalation in Fortinet FortiClient Windows 5.4.3 and earlier as well as 5.6.0 allows attacker to gain privilege via exploiting the Windows security alert dialog thereby popping up when the VPN before logon feature is enabled and an untrusted certificate chain.

Risk Information

Base Score

8.1

MODERATE

Vector

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.272

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2017-7344 are affected in Forticlient 5.6.0	Windows
CVE-2017-7344	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234