CVE-2023-44248

Summary

CVE-2023-44248 is an access control vulnerability affecting FortiEDRCollectorWindows versions 5.2.0.4549 and below, 5.0.3.1007 and below, and all versions of 4.0. A local attacker can exploit this CWE-284 vulnerability by manipulating specific registry keys to prevent the collector service from starting during the next system reboot. This issue may impact the security posture of affected systems, potentially allowing unauthorized access or data breaches. Users are strongly advised to update to the latest FortiEDRCollectorWindows version as soon as possible to mitigate the risk of this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.