NetSight
critical9.1

CVE-2022-23441

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the netw…

Impact

A use of hard-coded cryptographic key vulnerability [CWE-321] in FortiEDR versions 5.0.2, 5.0.1, 5.0.0, 4.0.0 may allow an unauthenticated attacker on the network to disguise as and forge messages from other collectors.

Affected products

VendorProductAffected versions
FortinetFortiedr
Versions 4.0.0, 5.0.0, 5.0.1, 5.0.2

Weakness classification

References