CVE-2022-40681

Name of the Vulnerable Software and Affected Versions Fortinet FortiClient (Windows) versions 7.0.0 through 7.0.7 Fortinet FortiClient (Windows) versions 6.4.0 through 6.4.9 Fortinet FortiClient (Windows) versions 6.2.0 through 6.2.9 Fortinet FortiClient (Windows) versions 6.0.0 through 6.0.10

Description The issue is related to incorrect authorization in Fortinet FortiClient, allowing an attacker to cause denial of service by sending a crafted request to a specific named pipe.

Recommendations For versions 7.0.0 through 7.0.7, update to a version outside of this range to resolve the issue. For versions 6.4.0 through 6.4.9, update to a version outside of this range to resolve the issue. For versions 6.2.0 through 6.2.9, update to a version outside of this range to resolve the issue. For versions 6.0.0 through 6.0.10, update to a version outside of this range to resolve the issue. As a temporary workaround, consider restricting access to the specific named pipe until a patch is available.