CVE-2021-32592

Description

An unsafe search path vulnerability in FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x and FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x may allow an attacker to perform a DLL Hijack attack on affected devices via a malicious OpenSSL engine library in the search path.

Reserved 2021-05-11 | Published 2021-12-01 | Updated 2024-10-25 | Assigner fortinet

Problem types

Execute unauthorized code or commands

Product status

FortiClientWindows 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x; FortiClientEMS 7.0.0, 6.4.6 and below, 6.2.x, 6.0.x
affected

References

fortiguard.com/advisory/FG-IR-21-088

cve.org (CVE-2021-32592)

nvd.nist.gov (CVE-2021-32592)

Download JSON