GCVE - cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:macos:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:macos:*:*

part: a version: 7.4.0 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Forticlient (`f1dedd21-b015-56f2-acb3-24cd61ec013c`)
Edition	*
Language	*
Software edition	*
Target software	macos
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-52968`	vulnerable	2026-06-08 06:54:12.080711	Details available MEDIUM (5.8) An improper authentication in Fortinet FortiClientMac 7.0.11 through 7.2.4 allows attacker to gain improper access to MacOS via empty password. Published: 2025-02-11T16:09:00.587Z Updated: 2025-02-11T16:35:11.996Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-300	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40592`	vulnerable	2026-06-08 06:43:52.706207	Details available MEDIUM (6.8) An improper verification of cryptographic signature vulnerability [CWE-347] in FortiClient MacOS version 7.4.0, version 7.2.4 and below, version 7.0.10 and below, version 6.4.10 and below may allow a local authenticated attacker to swap the installer with a malicious package via a race condition during the installation process. Published: 2024-11-12T18:53:49.686Z Updated: 2024-11-13T18:30:43.925Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-022	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3661`	vulnerable	2026-06-08 06:43:51.126586	DHCP routing options can manipulate interface-based VPN traffic HIGH (7.6) DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Published: 2024-05-06T18:31:21.217Z Updated: 2024-08-28T19:09:06.995Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2131#section-7 https://datatracker.ietf.org/doc/html/rfc3442#section-7 https://tunnelvisionbug.com/ https://www.leviathansecurity.com/research/tunnelvision https://news.ycombinator.com/item?id=40279632	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.