An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.
References
| Link | Resource |
|---|---|
| https://fortiguard.fortinet.com/psirt/FG-IR-24-219 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
31 Jan 2025, 16:10
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Fortinet
Fortinet fortios |
|
| CPE | cpe:2.3:o:fortinet:fortios:*:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| References | () https://fortiguard.fortinet.com/psirt/FG-IR-24-219 - Vendor Advisory |
14 Jan 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-01-14 14:15
Updated : 2025-01-31 16:10
NVD link : CVE-2024-46668
Mitre link : CVE-2024-46668
JSON object : View
Products Affected
fortinet
- fortios
CWE
CWE-770
Allocation of Resources Without Limits or Throttling