CVE-2024-46668CWE-770

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions…

High · published January 14, 2025

CVSS v3.1
7.1
EPSS
1%
Percentile
62.2
In the wild
Unconfirmed
What it is

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.

The record
Technical detail
CVSS v3.1
7.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:U/RC:C
CVSS v4.0
Not supplied
EPSS
0.00991 · 62.2th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2025-01-14T14:08Z
EPSS history
Timeline
  • 14 JAN 14:08Z
    An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions…
    cvelistv5