Lucene search

K
fortinetFortiGuard LabsFG-IR-22-018
HistoryApr 05, 2022 - 12:00 a.m.

FortiEDR - Hardcoded AES key enable disabling local Collector

2022-04-0500:00:00
FortiGuard Labs
www.fortiguard.com
13
fortiedr
vulnerability
local attacker
collectors.

EPSS

0

Percentile

5.1%

A use of hard-coded cryptographic key vulnerability [CWE-321] in the registration mechanism of FortiEDR collectors may allow a local attacker to disable and uninstall the collectors from the end-points within the same deployment.

EPSS

0

Percentile

5.1%

Related for FG-IR-22-018