CVE-2015-4077

CVE-2015-4077 describes a local information disclosure vulnerability affecting specific Fortinet FortiClient drivers (mdare64_48.sys, mdare32_48.sys, mdare32_52.sys, and mdare64_52.sys) prior to version 5.2.4. An attacker with local access could exploit this flaw by making a crafted ioctl call (0x22608C) to read arbitrary kernel memory. Rated with a CVSS score of 2.1, this vulnerability has low attack complexity and requires local access, with the primary impact being confidentiality (disclosure of kernel memory). While not observed in active exploitation and not listed in CISA's KEV catalog, an ExploitDB entry (EDB-45149) exists, indicating public exploit code for local privilege escalation, though there is minimal community discussion or media coverage.