The vulnerability of the protection mechanism for detecting and responding to security threats at FortiEDR endpoints stems from inadequate access control. This allows attackers to prevent the data collection service from being launched upon system rehydration.

The vulnerability of the security protection mechanism for detecting and responding to security threats at FortiEDR endpoints is related to lack of access control. Exploiting this vulnerability could allow an attacker to prevent the data collection service from running during the next system rebo...

The vulnerability of the TLS implementation in Cisco Firepower Threat Defense’s micro-programming network interface devices allows attackers to induce a service failure.

The vulnerability of the TLS protocol implementation in Cisco Firepower Threat Defense’s microprogramming network interfaces is related to improper memory allocation. Exploiting this vulnerability could allow a malicious actor to cause a service failure by triggering a reboot of the Snort intrusi...

[SECURITY] Fedora 39 Update: microcode_ctl-2.1-58.fc39

The microcodectl utility is a companion to the microcode driver written by Tigran Aivazian . The microcode update is volatile and needs to be uploaded on each system boot i.e. it doesn't reflash your cpu permanently, reboot and it reverts back to the old microcode...

Fortinet FortiEDR Access Control Error Vulnerability (CNVD-2023-98184)

Fortinet FortiEDR is an endpoint security solution built from the ground up by Fortinet. An Access Control Error vulnerability exists in Fortinet FortiEDR Collector Windows that stems from the presence of improper access controls in the application. A local attacker could exploit the vulnerabilit...

Vulnerabilities fixed in Fortinet FortiOS and FortiProxy

Fortinet has fixed vulnerabilities in FortiOS and FortiProxy. A malicious party could exploit the vulnerability to cause a denial-of-service, or to reboot the system with a rogue image. To reboot, the malicious party needs prior administrator privileges. Fortinet has released updates to fix the...

CVE-2023-44248

An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...

CVE-2023-44248

An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...

Improper access control

An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...

CVE-2023-44248

An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...

CVE-2023-44248

An improper access control vulnerability CWE-284 in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service...

Moxa EDR Products Denial of Service (CVE-2023-4452)

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot. This plugin...

kernel: i40e: Fix kernel crash during reboot when adapter is in recovery mode

A flaw was found in the i40e module in the Linux kernel. When the firmware is in recovery mode during the probe phase, some probe functions are skipped, causing a NULL pointer dereference when the system shuts down or is rebooted. This issue results in a denial of service...

PT-2023-7192 · Fortinet · Fortiedr

Name of the Vulnerable Software and Affected Versions: FortiEDR versions prior to 5.2.0.4549 FortiEDR versions prior to 5.0.3.1007 FortiEDR version 4.0 Description: The issue is related to improper access control in FortiEDR, which may allow a local attacker to prevent the collector service from...

CVE-2023-5088

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

CVE-2023-5088 Qemu: improper ide controller reset can lead to mbr overwrite

A bug in QEMU could cause a guest I/O operation otherwise addressed to an arbitrary disk offset to be targeted to offset 0 instead potentially overwriting the VM's boot code. This could be used, for example, by L2 guests with a virtual disk vdiskL2 stored on a virtual disk of an L1 vdiskL1...

CVE-2023-4452

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot...

Input validation

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot...

CVE-2023-4452

CVE-2023-4452 affects MOXA EDR-810, EDR-G902 and EDR-G903 series. The root cause is insufficient input validation in the URI of the device web server, leading to a denial-of-service that can trigger a reboot. Documented impact is Availability: High (DoS) with potential device reboot; Attack Vecto...

CVE-2023-4452 Web Server Buffer Overflow Vulnerability

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot...

CVE-2023-4452 Web Server Buffer Overflow Vulnerability

A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerability. This vulnerability stems from insufficient input validation in the URI, potentially enabling malicious users to trigger the device reboot...