CVE-2024-36513

Summary

CVE-2024-36513 is a newly disclosed privilege escalation vulnerability affecting FortiClient for Windows. Versions 7.2.4 and below, as well as 7.0.12 and below, and all versions of 6.4 are reportedly vulnerable. The root cause is a privilege context switching error [CWE-270] in the software's handling of Lua auto patch scripts. An authenticated user can exploit this flaw to escalate their privileges, potentially gaining administrative access to the system. This vulnerability poses a significant risk for organizations using FortiClient on Windows platforms and should be addressed promptly by installing the latest software updates.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.