CVE-2022-23441

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.

Score

CVSS 3.1 9.1 Critical

Status

Modified - psirt@fortinet.com

Published

2022-04-06

Last modified

2024-10-25

Weaknesses

CWE-284, CWE-798

Affected products

• Fortiedr (Fortinet)
• Fortinet Fortiedr (Fortinet)

References

• https://fortiguard.com/psirt/FG-IR-22-019