CVE-2024-46667

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-46667
A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections.

7.5 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://fortiguard.fortinet.com/psirt/FG-IR-24-164
Configurations

No configuration.

History

18 Feb 2025, 22:15

Type Values Removed Values Added
Summary
  • (es) Una asignación de recursos sin límites ni limitación en Fortinet FortiSIEM 5.3 todas las versiones, 5.4 todas las versiones, 6.x todas las versiones, 7.0 todas las versiones y 7.1.0 a 7.1.5 puede permitir que un atacante deniegue tráfico TLS válido mediante el consumo de todas las conexiones asignadas.

14 Jan 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-01-14 14:15

Updated : 2025-02-18 22:15

NVD link : CVE-2024-46667

Mitre link : CVE-2024-46667

CVE.ORG link : CVE-2024-46667

JSON object : View

Products Affected

No product.

CWE
CWE-770

Allocation of Resources Without Limits or Throttling