CoreCVE
Back

HIGH

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory

Published Mar 15, 2020

Description

An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-427

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner fortinet
Published Mar 15, 2020
Updated Oct 25, 2024
Reserved Feb 19, 2020
Link CVE-2020-9287
CISA Vulnrichment
Updated Oct 24, 2024
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-9287
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-9287