Improper Access Control in Fortinet EDR Collector for Windows
CVE-2023-44248

4MEDIUM

Key Information:

Vendor

Fortinet
Status
Fortiedr Collectorwindows
Vendor
CVE Published:
14 November 2023

What is CVE-2023-44248?

An improper access control vulnerability in FortiEDR Collector for Windows could allow a local attacker to alter specific registry keys related to the collector service. This manipulation can result in the prevention of the service from starting upon the next system reboot, potentially compromising system integrity and operational continuity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

FortiEDR CollectorWindows 5.0.0 <= 5.0.2

References

https://fortiguard.com/psirt/FG-IR-23-306

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.