An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user permission via the malicious dylib file.

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory.

  - An improper control of generation of code vulnerability [CWE-94] in FortiClientMacOS versions 7.0.0 and     below and 6.4.5 and below may allow an authenticated attacker to hijack the MacOS camera without the user     permission via the malicious dylib file. (CVE-2021-42754)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

CVE-2021-42754

medium

Tenable Plugins

medium