CVE-2023-44248

5.5 mediumEPSS 0.2%

Medium (5.5) in fortinet fortiedr. EPSS 0.2% chance of exploitation in the next 30 days.

An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service.

Severity

CVSS 3.1

5.5 medium

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 6% of CVEs (scores of 2026-10-31)
CWE: CWE-284
Published: 2023-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

fortinet:fortiedr

References

https://fortiguard.com/psirt/FG-IR-23-306
https://fortiguard.com/psirt/FG-IR-23-306

Check your stack JSON