FortiEDR vulnerabilities

3 known vulnerabilities in FortiEDR from Fortinet. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows…

  CVE-2023-33303Oct 13, 2023Fortinet

  A insufficient session expiration in Fortinet FortiEDR version 5.0.0 through 5.0.1 allows attacker to execute unauthorized code or commands via api request

• 7.8 High severity

  Fortinet FortiEDR: Use of Hard-coded Credentials

  CVE-2022-23440Apr 6, 2022Fortinet

  A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deploy

• 9.1 Critical severity

  Fortinet FortiEDR: Use of Hard-coded Credentials

  CVE-2022-23441Apr 6, 2022Fortinet

  A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.