FireEye EDR Agent Persistent Denial-of-Service Vulnerability

A persistent denial-of-service vulnerability has been identified in the FireEye EDR agent. This issue arises when a malicious third party sends a specially-crafted tamper protection event to the HX service, triggering an exception that halts the processing of tamper protection events. Notably, this disruption persists even after rebooting the HX service.

Impact

Exploitation of this vulnerability leads to a persistent denial-of-service condition, where tamper protection events are not processed, causing potential gaps in security monitoring and response.