Hello, our "Vulnerability Scanner" detected that libcurl.dll as vulnerable to CVE-2025-0167Vulnerable files are:C:\Program Files\Fortinet\FortiClient\libcurl.dllC:\Program Files\Fortinet\FortiClient\x86\libcurl.dllWe use free FortiClient VPN SSL, so we can't confirm if full paid version is vulnerable too.We've upgraded to FortiClient VPN SSL 7.4.3, but libcurl.dll version is still vulnerable

ced_rtsystem

New Member

Solved

Question about FortiClient VPN SSL and CVE-2025-0167

Forum|Forum|1 year ago
May 29, 2025
2 replies
2406 views

Hello,

our "Vulnerability Scanner" detected that libcurl.dll as vulnerable to CVE-2025-0167

Vulnerable files are:

C:\Program Files\Fortinet\FortiClient\libcurl.dll
C:\Program Files\Fortinet\FortiClient\x86\libcurl.dll

We use free FortiClient VPN SSL, so we can't confirm if full paid version is vulnerable too.

We've upgraded to FortiClient VPN SSL 7.4.3, but libcurl.dll version is still vulnerable

Best answer by xshkurti

After going through the PSIRT website, there are no CVEs reported for this issue.

PSIRT Advisories | FortiGuard Labs

You can raise a request to Technical Support so we can track the issue with our FortiGuard Labs.

You can also check for libcurl.dll library to upgrade it separately:

Addressing CVE-2025-0167 vulnerability - How to upgrade curl and libcurl 8.12.0 - Microsoft Q&A

xshkurtiAnswer

Staff

After going through the PSIRT website, there are no CVEs reported for this issue.

PSIRT Advisories | FortiGuard Labs

You can raise a request to Technical Support so we can track the issue with our FortiGuard Labs.

You can also check for libcurl.dll library to upgrade it separately:

Addressing CVE-2025-0167 vulnerability - How to upgrade curl and libcurl 8.12.0 - Microsoft Q&A