What is CVE-2024-35281?

CVE-2024-35281 is a low-severity vulnerability in Fortinet Forticlient, classified under CWE-653. CVSS score: 2.5/10. Published 2025-05-13.

How severe is CVE-2024-35281?

Low severity. CVSS v3 base score is 2.5 out of 10.

Vulnerability in Fortinet Forticlient

CVE-2024-35281

An improper isolation or compartmentalization vulnerability [CWE-653] in FortiClientMac version 7.4.2 and below, version 7.2.8 and below, 7.0 all versions and FortiVoiceUCDesktop 3.0 all versions desktop application may allow an authenticated attacker to inject code via Electron environment variables.

EPSS: 0.001 (3.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.5 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N.

Affected products

Fortinet Forticlient
Fortinet Forticlientmac — versions 7.4.0, 7.2.0, 7.0.0
Fortinet Fortifone_softclient
Fortinet Fortivoiceucdesktop — versions 3.0.0

Weakness classification (CWE)

CWE-653

References

psirt@fortinet.com (Vendor Advisory)

Frequently asked questions

What is CVE-2024-35281?: CVE-2024-35281 is a low-severity vulnerability in Fortinet Forticlient, classified under CWE-653. CVSS score: 2.5/10. Published 2025-05-13.
How severe is CVE-2024-35281?: Low severity. CVSS v3 base score is 2.5 out of 10.