VULNERABILITY INTELLIGENCE

CVE-2024-54019

CVSS score4.8 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2025-06-10
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

Description

A improper validation of certificate with host mismatch in Fortinet FortiClientWindows version 7.4.0, versions 7.2.0 through 7.2.6, and 7.0 all versions allow an unauthorized attacker to redirect VPN connections via DNS spoofing or another form of redirection.

Weakness classification

  • psirt@fortinet.com: CWE-297

Primary references