What is CVE-2021-36183?

CVE-2021-36183 is a high-severity vulnerability in Fortinet Forticlient. CVSS score: 7.4/10. Published 2021-11-02.

How severe is CVE-2021-36183?

High severity. CVSS v3 base score is 7.4 out of 10.

Vulnerability in Fortinet Forticlient

CVE-2021-36183

An improper authorization vulnerability [CWE-285] in FortiClient for Windows versions 7.0.1 and below and 6.4.2 and below may allow a local unprivileged attacker to escalate their privileges to SYSTEM via the named pipe responsible for For…

EPSS: 0.003 (26.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Fortinet Forticlient
Fortinet Forticlientwindows — versions FortiClientWindows 7.0.1, 7.0.0, 6.4.2, 6.4.1, 6.4.0

References

psirt@fortinet.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2021-36183?: CVE-2021-36183 is a high-severity vulnerability in Fortinet Forticlient. CVSS score: 7.4/10. Published 2021-11-02.
How severe is CVE-2021-36183?: High severity. CVSS v3 base score is 7.4 out of 10.