GCVE - cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:fortinet:forticlient:7.4.0:*:*:*:*:windows:*:*

part: a version: 7.4.0 update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Forticlient (`f1dedd21-b015-56f2-acb3-24cd61ec013c`)
Edition	*
Language	*
Software edition	*
Target software	windows
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-54019`	vulnerable	2026-06-08 06:54:15.901238	Details available MEDIUM (4.4) A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection. Published: 2025-06-10T16:36:06.088Z Updated: 2025-06-10T19:40:16.375Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-365	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-50564`	vulnerable	2026-06-08 06:52:10.722544	Details available LOW (3.2) A use of hard-coded cryptographic key in Fortinet FortiClientWindows version 7.4.0, 7.2.x all versions, 7.0.x all versions, and 6.4.x all versions may allow a low-privileged user to decrypt interprocess communication via monitoring named piped. Published: 2025-01-14T14:09:49.460Z Updated: 2025-01-15T14:53:40.154Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-216	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-47574`	vulnerable	2026-06-08 06:48:12.866475	Details available HIGH (7.4) A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages. Published: 2024-11-13T11:15:04.046Z Updated: 2024-11-13T14:43:08.240Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-24-199	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-40586`	vulnerable	2026-06-08 06:43:52.527778	Details available MEDIUM (6.3) An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe. Published: 2025-02-11T16:09:06.665Z Updated: 2025-02-12T15:53:08.076Z Open on db.gcve.eu Reference links https://fortiguard.fortinet.com/psirt/FG-IR-23-279	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-3661`	vulnerable	2026-06-08 06:43:51.127352	DHCP routing options can manipulate interface-based VPN traffic HIGH (7.6) DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traffic can be forced to leak traffic over the physical interface. An attacker on the same local network can read, disrupt, or possibly modify network traffic that was expected to be protected by the VPN. Published: 2024-05-06T18:31:21.217Z Updated: 2024-08-28T19:09:06.995Z Open on db.gcve.eu Reference links https://datatracker.ietf.org/doc/html/rfc2131#section-7 https://datatracker.ietf.org/doc/html/rfc3442#section-7 https://tunnelvisionbug.com/ https://www.leviathansecurity.com/research/tunnelvision https://news.ycombinator.com/item?id=40279632	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-36507`	vulnerable	2026-06-08 06:39:45.268397	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.