---
id: CVE-2025-47761
title: >-
  An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782]
  vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,
  FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user
  to execute unauthori…
summary: >-
  An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782]
  vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3,
  FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user
  to execute unauthori…
severity: high
cvss: 7.1
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H/E:P/RL:O/RC:R'
cvssSource: cna
cwe:
  - CWE-782
vendor: Fortinet
product: FortiClientWindows
affected:
  - FortiClientWindows >= 7.4.0 <= 7.4.3
  - FortiClientWindows >= 7.2.0 <= 7.2.9
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2025-11-18T21:11:44.141602Z'
published: '2025-11-18'
updated: '2026-10-29'
sourceUpdated: '2026-10-29T15:09:57.764Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-47761'
references:
  - url: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-112'
    label: 'https://fortiguard.fortinet.com/psirt/FG-IR-25-112'
tags:
  - cve.org
epss: 0.0017
epssPercentile: 0.06382
ingestedAt: '2026-11-01T20:00:16.964Z'
---

## Overview

An Exposed IOCTL with Insufficient Access Control vulnerability [CWE-782] vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.3, FortiClientWindows 7.2.0 through 7.2.9 may allow an authenticated local user to execute unauthorized code via fortips driver.  Success of the attack would require bypassing the Windows memory protections such as Heap integrity and HSP. In addition, it requires a valid and running VPN IPSec connection.

## Affected

- `FortiClientWindows >= 7.4.0 <= 7.4.3`
- `FortiClientWindows >= 7.2.0 <= 7.2.9`

## Remediation

Upgrade to FortiClientWindows version 7.4.4 or above
Upgrade to FortiClientWindows version 7.2.10 or above