vulnerability

Fortinet FortiOS: Allocation of Resources Without Limits or Throttling (CVE-2024-46668)

Severity
8
CVSS
(AV:N/AC:L/Au:N/C:N/I:N/A:C)
Published
Jan 14, 2025
Added
Feb 3, 2025
Modified
Aug 11, 2025

Description

An allocation of resources without limits or throttling vulnerability [CWE-770] in FortiOS versions 7.4.0 through 7.4.4, versions 7.2.0 through 7.2.8, versions 7.0.0 through 7.0.15, and versions 6.4.0 through 6.4.15 may allow an unauthenticated remote user to consume all system memory via multiple large file uploads.

Solutions

fortios-upgrade-6_4_16fortios-upgrade-7_0_16fortios-upgrade-7_2_9fortios-upgrade-7_4_5
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.