← Back

CVE-2025-54660

nvd nist
Published: Nov 18, 2025Modified: Jun 17, 2026

JSON object

Loading...
5.5
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Exploitability: 1.8 / Impact: 3.6
Source: psirt@fortinet.com (Secondary)

Description

An active debug code vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.10, FortiClientWindows 7.0 all versions may allow a local attacker to run the application step by step and retrieve the saved VPN user password

Affected (2)

Fortinet
1 product
Forticlient
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fortinet
Forticlient
From 7.0.0 to 7.2.11
Forticlient
From 7.4.0 to 7.4.4

Related CWEs

CWE-489
Active Debug Code
The product is deployed to unauthorized actors with debugging code still enabled or active, which can create unintended entry points or expose sensitive information.

References (1)

Source: psirt@fortinet.com
Vendor Advisory

Timeline

No history available yet.