Improper Access Control in Fortinet EDR Collector for Windows
CVE-2023-44248

4MEDIUM

Key Information:

Vendor
Fortinet
Status
Fortiedr
Vendor
CVE Published:
14 November 2023

Summary

An improper access control vulnerability in FortiEDR Collector for Windows could allow a local attacker to alter specific registry keys related to the collector service. This manipulation can result in the prevention of the service from starting upon the next system reboot, potentially compromising system integrity and operational continuity.

Affected Version(s)

FortiEDR 5.0.3

FortiEDR 5.0.0 <= 5.0.1

FortiEDR 4.0.0

References

https://fortiguard.com/psirt/FG-IR-23-306

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.