description: An Unsafe Search Path vulnerability in FortiClient EMS online installer 6.2.1 and below may allow a local attacker with control over the directory in which FortiClientEMSOnlineInstaller.exe resides to execute arbitrary code on the system via uploading malicious Filter Library DLL files in that directory.
problem types: Execute unauthorized code or commands
affected:
{
product: Fortinet FortiClient EMS
vendor: Fortinet
versions:
status: affected, version: 6.2.1 and below
}