https://fortiguard.com/advisory/FG-IR-21-079

The remote macOS host is running a version of Fortinet FortiClient that is 6.4.x prior to 6.4.6 or 7.x prior to 7.0.1.
It is, therefore, affected by a dylib injection vulnerability. An authenticated, local attacker can exploit this, by replacing the FortiClient camera handling library with a malicious one, to hijack the macOS camera.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2021-42754

medium

Tenable Plugins

medium