CVE-2024-21753: forticlient endpoint management server from 1.2.1 (inclusive), through 1.2.5 (inclusive), from 6.0.0 (inclusive)…

Affected technology

forticlient endpoint management server · from 1.2.1 (inclusive), through 1.2.5 (inclusive)
fortinet

forticlient endpoint management server · from 6.0.0 (inclusive), through 6.0.8 (inclusive)
fortinet

forticlient endpoint management server · from 6.2.0 (inclusive), through 6.2.9 (inclusive)
fortinet

forticlient endpoint management server · from 6.4.0 (inclusive), through 6.4.9 (inclusive)
fortinet

forticlient endpoint management server · from 7.0.0 (inclusive), through 7.0.13 (inclusive)
fortinet

forticlient endpoint management server · from 7.2.0 (inclusive), through 7.2.4 (inclusive)
fortinet

FortiClientEMS · 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.7 through 6.4.9, 6.4.0 through 6.4.4, 6.2.6 through 6.2.9, 6.2.3 through 6.2.4, 06.02.00 through 06.02.02, 6.0.8, 06.00.00 through 06.00.06, 01.02.02 through 01.02.05
Fortinet

Description’s affected range: through 7.2.4

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

Attack conditions (NVD, CVSS 3.1): Network (remote) · High privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service. Vendor/CNA’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality impact as none; integrity impact as low; availability impact as high. NVD’s CVSS 3.1 assessment (base score 6.0/10) rates confidentiality and integrity impact as low; availability impact as high.