CVE-2024-36506

Summary

CVE-2024-36506 is a vulnerability affecting FortiClientEMS versions 7.4.0, 7.2.0 through 7.2.4, and all versions of 7.0 and 6.4. This issue, categorized as CWE-940 (Improper Verification of Source or Return Data), allows a remote attacker to bypass the trusted host feature through a session connection, potentially compromising secure communications. The flaw stems from insufficient validation of communication channels, enabling unauthorized access. Organizations using these FortiClientEMS versions are advised to apply the necessary patches to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.