CVE-2022-26113: FortiClient Arbitrary File Write As SYSTEM - Rhino Security Labs
Tags
attack-pattern: Javascript - T1059.007 Vulnerabilities - T1588.006
Show in Graph
Common Information
Type Value
UUID 974a423c-b439-44cb-887f-c263a995fe5e
Fingerprint a03ad75763274840
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 30, 2022, 5:26 a.m.
Added to db Jan. 18, 2023, 10:20 p.m.
Last updated Nov. 16, 2024, 7:04 p.m.
Headline
Title CVE-2022-26113: FortiClient Arbitrary File Write As SYSTEM - Rhino Security Labs
Detected Hints/Tags/Attributes 28/1/6
Source URLs
Redirection Url
Details Source https://rhinosecuritylabs.com/research/cve-2022-26113-forticlient-arbitrary-file-write-as-system/
URL Provider
Details Provider Source level domain
Details rhinosecuritylabs.com rhinosecuritylabs.com
Attributes
Details Type #Events CTI Value
Details CVE 1 
cve-2022-26113
Details Domain 65 
www.fortiguard.com
Details File 1 
fcconfig.exe
Details File 1 
c:\program files\fortinet\forticlient\forticlient.exe
Details File 8 
poc.txt
Details Url 1 
https://www.fortiguard.com/psirt/fg-ir-22-044