HIGH

CVE-2022-41333

CVSS v3

7.5

HIGH

EPSS Score

10.2%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

Technical details

Published
3/7/2023

Frequently asked questions

What is CVE-2022-41333?

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

Is CVE-2022-41333 actively exploited?

Active exploitation of CVE-2022-41333 has not been confirmed. The EPSS score is 10.2%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-41333?

CVE-2022-41333 has a CVSS v3 base score of 7.5 (HIGH severity).

Is CVE-2022-41333 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.