CVE-2022-23440

Name of the Vulnerable Software and Affected Versions FortiEDR collectors versions 4.0.0 through 5.0.2

Description A use of hard-coded cryptographic key vulnerability in the registration mechanism of FortiEDR collectors may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.

Recommendations For versions 4.0.0 through 5.0.2, consider disabling the registration mechanism temporarily until a patch is available to prevent exploitation. Restrict access to the collectors to minimize the risk of exploitation. Avoid using the affected registration mechanism in the collectors until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.