CVE-2023-44248
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-44248 is an improper access control vulnerability (CWE-284) that affects FortiEDRCollectorWindows versions 5.2.0.4549 and below, 5.0.3.1007 and below, and 4.0 all. This vulnerability allows a local attacker to tamper with registry keys of the service, preventing the collector service from starting in the next system reboot. The risk score is rated at 25, indicating a medium severity level. The exploitability score is 1.8, with low privileges required and no user interaction needed for the attack vector, which is local in nature. The impact score is 3.6, highlighting a high availability impact but no confidentiality or integrity impact. Remediation steps to address this vulnerability have not been specified in the provided information. Note: The analysis_description field is empty; therefore, no additional information or analysis is available beyond the provided details about the vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions