Rewterz Threat Advisory – CVE-2022-43946 – Fortinet FortiClientWindows Vulnerability

Severity

High

Analysis Summary

CVE-2022-43946

Fortinet FortiClientWindows could allow a remote attacker to gain elevated privileges on the system, caused by a time-of-check time-of-use (TOCTOU) race condition. By sending a specially-crafted request, an attacker could exploit this vulnerability to gain elevated privileges.

Impact

• Privilege Escalation

Indicators Of Compromise

CVE

• CVE-2022-43946

Affected Vendors

Fortinet

Affected Products

• Fortinet FortiClientWindows 6.0
• Fortinet FortiClientWindows 6.2
• Fortinet FortiClientWindows 6.4.0
• Fortinet FortiClientWindows 7.0.0
• Fortinet FortiClientWindows 7.0.7

Remediation

Refer to FortiGuard Advisory for patch, upgrade or suggested workaround information.

FortiGuard Advisory