Improper Resource Control Vulnerability in FortiEDR Collector
CVE-2022-39949

4.4MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortinet Fortiedr
Vendor
CVE Published:
2 November 2022

What is CVE-2022-39949?

An improper control of a resource through its lifetime in FortiEDR Collector versions may allow a privileged user to exploit this vulnerability. By using specialized tools, the user could terminate FortiEDR processes, effectively circumventing the intended EDR protection mechanisms. This vulnerability poses a significant risk as it enables a malicious actor with sufficient access to undermine security measures put in place to monitor and protect the endpoint.

Affected Version(s)

Fortinet FortiEDR FortiEDR CollectorWindows 4.0.0  through 4.1, 5.0.0 through 5.0.3.751, 5.1.0

References

https://fortiguard.com/psirt/FG-IR-22-218

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.