CVE-2017-7344

CVE-2017-7344 describes a privilege escalation vulnerability in Fortinet FortiClient Windows versions 5.4.3 and earlier, as well as 5.6.0. This flaw allows an attacker to gain elevated privileges by manipulating the Windows "security alert" dialog that appears when the "VPN before logon" feature is enabled with an untrusted certificate chain. Rated with a CVSS score of 8.1 (HIGH), the vulnerability has a network attack vector and high impact on confidentiality, integrity, and availability, though it requires high attack complexity. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant media coverage, with only one community mention on Reddit.