VULNERABILITY INTELLIGENCE

CVE-2015-5736

CVSS score7.2 HIGH
EPSS probability2.11%
CISA KEVNot currently listed
Published2015-09-03
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The Fortishield.sys driver in Fortinet FortiClient before 5.2.4 allows local users to execute arbitrary code with kernel privileges by setting the callback function in a (1) 0x220024 or (2) 0x220028 ioctl call.

Primary references