Fortinet — FortiClient EMS — Fortinet FortiClient EMS contains a SQL injection vulnerability that allows an unauthenticated attacker to execute commands as SYSTEM via specifically crafted requests.
Details
EPSS Score
ⓘ
97.59%
99.9th percentile
Confidence
100%
CISA KEV
Date Added
Mar 25, 2024
Patch Due
Apr 15, 2024
Used in ransomware campaigns
Required Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.