CVE-2024-47574

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

A authentication bypass using an alternate path or channel in Fortinet FortiClientWindows version 7.4.0, versions 7.2.4 through 7.2.0, versions 7.0.12 through 7.0.0, and 6.4.10 through 6.4.0 allows low privilege attacker to execute arbitrary code with high privilege via spoofed named pipe messages.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-288 CWE-306

Affected software

Vendor	Product	Versions
Fortinet	FortiClientWindows	7.4.0; >= 7.2.0, <= 7.2.4; >= 7.0.0, <= 7.0.12; >= 6.4.0, <= 6.4.10
fortinet	forticlientwindows	7.4.0; >= 7.2.0, <= 7.2.4; >= 7.0.0, <= 7.0.12; >= 6.4.0, <= 6.4.10

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-199Vendor Advisory

Timeline

Published: Nov 13, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-475759.8A missing authentication for critical function in FortiManager 7.6.0, FortiManager 7.4.0 through 7.4.4, FortiManager 7.2.0 through 7.2.7, Fo CVE-2024-475763.3SAP Product Lifecycle Costing Client (versions below 4.7.1) application loads on demand a DLL that is available with Windows OS. This DLL is CVE-2024-475772.7Webservice API endpoints for Assisted Service Module within SAP Commerce Cloud has information disclosure vulnerability. When an authorized CVE-2024-475789.1Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is u CVE-2024-475796.8An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system serve CVE-2024-47587.6The Muslim Prayer Time BD WordPress plugin through 2.4 does not have CSRF check in place when reseting its settings, which could allow attac CVE-2024-475806.8An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the CVE-2024-475814.3SAP HCM Approve Timesheets Version 4 application does not perform necessary authorization checks for an authenticated user, resulting in esc CVE-2024-475825.3Due to missing validation of XML input, an unauthenticated attacker could send malicious input to an endpoint which leads to XML Entity Expa CVE-2024-475854.3SAP NetWeaver Application Server for ABAP and ABAP Platform allows an authenticated attacker to gain higher access levels than they should h CVE-2024-475865.3SAP NetWeaver Application Server for ABAP and ABAP Platform allows an unauthenticated attacker to send a maliciously crafted http request wh CVE-2024-475873.5Cash Operations does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges causing low