VYPR
← All advisories
High severity7.8NVD Advisory· Published Apr 6, 2022· Updated Jun 17, 2026

CVE-2022-23440

CVE-2022-23440

Description

A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.

Affected products

6
  • Fortinet/FortiEDR5 versions
    cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.2:*:*:*:*:*:*:*
    • (no CPE)range: 5.0.2, 5.0.1, 5.0.0, 4.0.0
  • Fortinet/Fortinetcpe-rescue
    Range: FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.