VYPR
← All advisories
Critical severity9.1NVD Advisory· Published Apr 6, 2022· Updated Jun 17, 2026

CVE-2022-23441

CVE-2022-23441

Description

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.

Affected products

6
  • Fortinet/FortiEDR5 versions
    cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.0:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:fortinet:fortiedr:5.0.2:*:*:*:*:*:*:*
    • (no CPE)range: 5.0.2, 5.0.1, 5.0.0, 4.0.0
  • Fortinet/Fortinetcpe-rescue
    Range: FortiEDR 5.0.2, 5.0.1, 5.0.0, 4.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.