Fortinet FortiEDR vulnerabilities

2 known vulnerabilities in Fortinet FortiEDR from Fortinet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  Fortinet FortiEDR: Use of Hard-coded Credentials

  CVE-2022-23440Apr 6, 2022Fortinet

  A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deploy

• 9.1 Critical severity

  Fortinet FortiEDR: Use of Hard-coded Credentials

  CVE-2022-23441Apr 6, 2022Fortinet

  A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.