PoC Index

CVE-2024-40586

MEDIUM 6.7EPSS 0.2%

An Improper Access Control vulnerability [CWE-284] in FortiClient Windows version 7.4.0, version 7.2.6 and below, version 7.0.13 and below may allow a local user to escalate his privileges via FortiSSLVPNd service pipe.

CVSS v3.1
6.7 MEDIUMCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.24% chance of exploitation in the next 30 days, 15th percentile
Published
2025-02-11
Updated
2025-02-12

Proof-of-concept exploits (1)

References

Related