CVE-2022-41333: fortinet fortirecorder_firmware Uncontrolled Resource Consumption
Vulnerability summary
CVE-2022-41333 is a high (CVSS 7.5) Uncontrolled Resource Consumption vulnerability in fortinet fortirecorder_firmware. EPSS estimates a 7.23% chance of exploitation in the next 30 days, higher than 94.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-03-2023PublishedVulnerability first disclosed.
- 13-02-2025Last modifiedVulnerability information updated.
Description
An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA6.8MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:X/RC:RDiffers
EPSS trend
Probability
7.23%
Chance of exploitation in the next 30 days
Percentile
94%
Versus all other CVEs
30-day change
0.00 pp
From 7.23% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundFortiRecorder 6.4.3 - Denial of Service
Maturity: poc
Weaknesses
CWE · root causeAffected systems
Fortinet1 product
- fortirecorder_firmware≥ 6.0.0, ≤ 6.0.11 | ≥ 6.4.0, ≤ 6.4.3
1 vendor · 1 product
References
2 links- fortiguard.com/psirt/FG-IR-22-388Vendor Advisory