Medium severity4.4NVD Advisory· Published Nov 2, 2022· Updated Jun 17, 2026

CVE-2022-39949

Description

An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.

Affected products

Fortinet/FortiEDR
cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:*:*:*
Range: >=4.0.0,<=4.1.0
Fortinet/FortiEDRCollectorWindowsllm-fuzzy
Range: 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0
Fortinet/Fortinetcpe-rescue
Range: FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-22-218nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.286
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000