Input validation

2022-11-0212:15:00

PRIOn knowledge base

www.prio-n.com

resource control

fortiedr collectorwindows

vulnerability

edr protection

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

JSON

An improper control of a resource through its lifetime vulnerability [CWE-664] in FortiEDR CollectorWindows 4.0.0 through 4.1, 5.0.0 through 5.0.3.751, 5.1.0 may allow a privileged user to terminate the FortiEDR processes with special tools and bypass the EDR protection.

CPENameOperatorVersion
fortiedrge4.0.0
fortiedrle4.1.0
fortiedrge5.0.0
fortiedrle5.0.3.751
fortiedrge5.1.0
fortiedrle5.2.0.2288

Name	Operator	Version
fortiedr	ge	4.0.0
fortiedr	le	4.1.0
fortiedr	ge	5.0.0
fortiedr	le	5.0.3.751
fortiedr	ge	5.1.0
fortiedr	le	5.2.0.2288

References

fortiguard.com/psirt/FG-IR-22-218