CVE-2022-41333: High severity fortinet fortirecorder firmware vulnerability

Q: What is CVE-2022-41333?

CVE-2022-41333 is an uncontrolled resource consumption vulnerability in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism.

Q: How severe is CVE-2022-41333?

CVE-2022-41333 has a severity rating of 7.5 (high).

Q: How does CVE-2022-41333 affect FortiRecorder?

CVE-2022-41333 may allow an unauthenticated attacker to make the FortiRecorder device unavailable via crafted GET requests.

Q: Which versions of FortiRecorder are affected by CVE-2022-41333?

FortiRecorder versions 6.4.3 and below, and 6.0.11 and below are affected by CVE-2022-41333.

Q: How can I mitigate the CVE-2022-41333 vulnerability?

To mitigate the CVE-2022-41333 vulnerability, it is recommended to update FortiRecorder to a version that is not affected.

Published Mar 7, 2023

Updated

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

Affected Software

2 affected components

Fortinet Fortirecorder Firmware>=6.0.0<=6.0.11

Fortinet Fortirecorder Firmware>=6.4.0<=6.4.3

Remediation

Information

Please upgrade to FortiRecorder version 7.0.0 or above Please upgrade to FortiRecorder version 6.4.4 or above Please upgrade to FortiRecorder version 6.0.12 or above

Event History

Mar 7, 2023

CVE Published

via MITRE·04:04 PM

Data Sourced

via MITRE·04:04 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-41333?

CVE-2022-41333 is an uncontrolled resource consumption vulnerability in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism.

How severe is CVE-2022-41333?

CVE-2022-41333 has a severity rating of 7.5 (high).

How does CVE-2022-41333 affect FortiRecorder?