Technical impact
The vulnerability is an SQL injection flaw caused by improper neutralization of special characters in SQL commands. It exists in Fortinet FortiClientEMS versions 7.4.0 through 7.4.1, 7.4.3 through 7.4.4, 7.2.0 through 7.2.10, and 7.2.12. An attacker who can send crafted requests to the EMS service may induce the application to execute arbitrary SQL statements, granting the ability to run unauthorized code or commands and thereby compromising confidentiality, integrity, and availability.
Affected Systems
The flaw affects Fortinet FortiClientEMS software across several release lines. Vulnerable versions include 7.4.0, 7.4.1, 7.4.3, 7.4.4, 7.2.0 through 7.2.10, and 7.2.12. Administrators should verify whether their installations fall within these ranges and assess exposure accordingly.
Risk and Exploitability
The CVSS base score of 6.2 places the risk in the medium range, while the EPSS score of less than 1% indicates a low yet non‑zero exploitation probability. The vulnerability is not yet listed in CISA’s KEV catalog. Based on the description, the likely attack vector is remote, requiring a network connection to the EMS service, and authentication is not required if the service is externally reachable. The flaw permits arbitrary SQL injection that can lead to remote code execution, underscoring the need for timely remediation.
