cve/2022/CVE-2022-41333.md

CVE-2022-41333

Description

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

POC

Reference

• http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/karimhabush/cyberowl
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/polar0x/CVE-2022-41333