CVEvulnerability

CVE-2024-46668

7.5 HIGH Published 2025-01-14 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-01-14
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 3.1 ([email protected])
7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-770

Description

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.

Affected configurations

• fortinet fortios (>= 6.4.0 < 6.4.16) • fortinet fortios (>= 7.0.0 < 7.0.16) • fortinet fortios (>= 7.2.0 < 7.2.9) • fortinet fortios (>= 7.4.0 < 7.4.5)

Related

Weakness · CWE (1)

  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References