CVE-2023-44248 - OpenCVE

An improper access control vulnerability [CWE-284] in FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Fortinet	Fortiedr

Configuration 1 [-]

OR	cpe:2.3:a:fortinet:fortiedr::::::windows::*
	cpe:2.3:a:fortinet:fortiedr::::::windows::*
	cpe:2.3:a:fortinet:fortiedr:4.0.0:::::windows::

References

Link	Resource
https://fortiguard.com/psirt/FG-IR-23-306	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: fortinet

Published: 2023-11-14T18:05:53.643Z

Updated: 2023-11-14T18:05:53.643Z

Reserved: 2023-09-27T12:26:48.750Z

Link: CVE-2023-44248

JSON object: View

NVD Information

Status : Analyzed

Published: 2023-11-14T18:15:54.470

Modified: 2023-11-21T01:39:38.243

Link: CVE-2023-44248

JSON object: View

Redhat Information

No data.

CWE

CWE-284

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:windows:*:*", "matchCriteriaId": "1A10D784-1ED4-46CC-AEB0-F006F8B0E16E", "versionEndIncluding": "5.0.3.1007", "versionStartIncluding": "5.0.3", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortiedr:*:*:*:*:*:windows:*:*", "matchCriteriaId": "2AF2B177-B287-4C8F-B1F4-42D3051D5EC7", "versionEndIncluding": "5.2.0.4549", "versionStartIncluding": "5.2.0", "vulnerable": true}, {"criteria": "cpe:2.3:a:fortinet:fortiedr:4.0.0:*:*:*:*:windows:*:*", "matchCriteriaId": "895977DC-C7C4-422F-BCAC-B2B46582A912", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "An improper access control vulnerability [CWE-284] in\u00a0FortiEDRCollectorWindows version 5.2.0.4549 and below, 5.0.3.1007 and below, 4.0 all may allow a local attacker to prevent the collector service to start in the next system reboot by tampering with some registry keys of the service."}, {"lang": "es", "value": "Una vulnerabilidad de control de acceso inadecuado [CWE-284] en FortiEDRCollectorWindows versi\u00f3n 5.2.0.4549 y anteriores, 5.0.3.1007 y anteriores, 4.0 puede permitir que un atacante local impida que el servicio recopilador se inicie en el siguiente reinicio del sistema alterando algunas claves de registro del servicio."}], "id": "CVE-2023-44248", "lastModified": "2023-11-21T01:39:38.243", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 4.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 3.6, "source": "psirt@fortinet.com", "type": "Secondary"}]}, "published": "2023-11-14T18:15:54.470", "references": [{"source": "psirt@fortinet.com", "tags": ["Vendor Advisory"], "url": "https://fortiguard.com/psirt/FG-IR-23-306"}], "sourceIdentifier": "psirt@fortinet.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "psirt@fortinet.com", "type": "Primary"}]}