CVE-2020-12820

score

<0.1

cvss

5.4

epss

0.9%

published

2024-12-19

kev added

—

first seen

2026-10-21

FortiOS 6.0.10 and below, 5.6.12 and below contain a stack-based buffer overflow caused by requesting a large FortiClient file name in non-default configuration, letting authenticated remote attackers crash the FortiClient NAC daemon and potentially execute arbitrary code, exploit requires requesting a large file name.