CVE-2022-41333

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

Score

CVSS 3.1 7.5 High

Status

Modified - psirt@fortinet.com

Published

2023-03-07

Last modified

2025-02-13

Weaknesses

CWE-400

Affected products

• Fortirecorder (Fortinet)
• Fortirecorder Firmware (Fortinet)

References

• http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html
• https://fortiguard.com/psirt/FG-IR-22-388