CVE-2023-22635

HIGH Year: 2023
CVSS v3 Score
7.8
High
Weakness Type
CWE-494
View all →

Vulnerability Description

A download of code without Integrity check vulnerability [CWE-494] in FortiClientMac version 7.0.0 through 7.0.7, 6.4 all versions, 6.2 all versions, 6.0 all versions, 5.6 all versions, 5.4 all versions, 5.2 all versions, 5.0 all versions and 4.0 all versions may allow a local attacker to escalate their privileges via modifying the installer upon upgrade.

Related Vulnerabilities

CVE-2019-12162

HIGH
CVSS:7.8(High)

Upwork Time Tracker 5.2.2.716 doesn't verify the SHA256 hash of the downloaded program update before running it, which could lead to code execution or local privilege escalation by replacing the origi...

CWE-4942019

CVE-2019-19166

HIGH
CVSS:7.8(High)

Tobesoft XPlatform v9.1, 9.2.0, 9.2.1 and 9.2.2 have a vulnerability that can load unauthorized DLL files. It allows attacker to cause remote code execution.

CWE-4942019

CVE-2019-9534

HIGH
CVSS:7.8(High)

The Cobham EXPLORER 710, firmware version 1.07, does not validate its firmware image. Development scripts left in the firmware can be used to upload a custom firmware image that the device runs. This ...

CWE-4942019

CVE-2020-7817

HIGH
CVSS:7.8(High)

MyBrowserPlus downloads the files needed to run the program through the setup file (Setup.inf). At this time, there is a vulnerability in downloading arbitrary files due to insufficient integrity veri...

CWE-4942020

CVE-2020-9759

HIGH
CVSS:7.8(High)

A Vulnerability of LG Electronic web OS TV Emulator could allow an attacker to escalate privileges and overwrite certain files. This vulnerability is due to wrong environment setting. An attacker coul...

CWE-4942020

CVE-2021-44168

HIGH
CVSS:7.8(High)

A download of code without integrity check vulnerability in the "execute restore src-vis" command of FortiOS before 7.0.3 may allow a local authenticated attacker to download arbitrary files on the de...

CWE-4942021