cve/2019/CVE-2019-17658.md

### [CVE-2019-17658](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-17658)
![](https://img.shields.io/static/v1?label=Product&message=Fortinet%20FortiClientWindows&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Escalation%20of%20privilege&color=brighgreen)

### Description

An unquoted service path vulnerability in the FortiClient FortiTray component of FortiClientWindows v6.2.2 and prior allow an attacker to gain elevated privileges via the FortiClientConsole executable service path.

### POC

#### Reference
- https://fortiguard.com/advisory/FG-IR-19-281

#### Github
- https://github.com/0xT11/CVE-POC
- https://github.com/Ibonok/CVE-2019-17658
- https://github.com/developer3000S/PoC-in-GitHub
- https://github.com/hectorgie/PoC-in-GitHub