CVE-2022-33877: Fortinet FortiClient

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An incorrect default permission [CWE-276] vulnerability in FortiClient (Windows) versions 7.0.0 through 7.0.6 and 6.4.0 through 6.4.8 and FortiConverter (Windows) versions 6.2.0 through 6.2.1, 7.0.0 and all versions of 6.0.0 may allow a local authenticated attacker to tamper with files in the installation folder, if FortiClient or FortiConverter is installed in an insecure folder.

Affected products

• Fortinet FortiClient: from 6.4.0, up to and including 6.4.8; from 7.0.0, up to and including 7.0.6
• Fortinet Forticonverter: from 6.0.0, up to and including 6.0.3; version 6.2.0 only; version 6.2.1 only; version 7.0.0 only

Published 2023-06-13. Last modified 2026-06-17.