VULNERABILITY INTELLIGENCE

CVE-2025-24473

CVSS score3.7 LOW
EPSS probability0.57%
CISA KEVNot currently listed
Published2025-05-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

A exposure of sensitive system information to an unauthorized control sphere vulnerability in Fortinet FortiClientWindows 7.2.0 through 7.2.1, FortiClientWindows 7.0.13 through 7.0.14 may allow an unauthorized remote attacker to view application information via navigation to a hosted webpage, if Windows is configured to accept incoming connections to port 8053 (non-default setup)

Weakness classification

  • psirt@fortinet.com: CWE-497
  • nvd@nist.gov: NVD-CWE-noinfo

Primary references