PT-2022-5802 · Fortinet · Fortiedr

Published 2022-04-05 · Updated 2022-04-14 · CVE-2022-23440

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions FortiEDR collectors versions 4.0.0 through 5.0.2

Description A use of hard-coded cryptographic key vulnerability in the registration mechanism of FortiEDR collectors may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.

Recommendations For versions 4.0.0 through 5.0.2, consider disabling the registration mechanism temporarily until a patch is available to prevent exploitation. Restrict access to the collectors to minimize the risk of exploitation. Avoid using the affected registration mechanism in the collectors until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Using Hardcoded Credentials

Weakness Enumeration

CWE-321

CWE-798

Related Identifiers

BDU:2022-07205

CVE-2022-23440

Affected Products

Fortiedr

References · 8

• https://osv.dev/vulnerability/CVE-2022-23440 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-07205 · Security Note
• https://fortiguard.com/psirt/FG-IR-22-018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23440 · Security Note
• https://t.me/cvenotify/28518 · Telegram Post
• https://t.me/cvenotify/28508 · Telegram Post
• https://t.me/cvenotify/28920 · Telegram Post
• https://vuldb.com/?id.196593 · Note