CVE-2024-36506: An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all...
3.5
CVSS
Description
An improper verification of source of a communication channel vulnerability [CWE-940] in FortiClientEMS 7.4.0, 7.2.0 through 7.2.4, 7.0 all versions, 6.4 all versions may allow a remote attacker to bypass the trusted host feature via session connection.
Classification
CVE ID: CVE-2024-36506
CVSS Base Severity: LOW
CVSS Base Score: 3.5
Affected Products
Vendor: Fortinet
Product: FortiClientEMS
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 19.27% (scored less or equal to compared to others)
EPSS Date: 2025-02-12 (when was this score calculated)