High severity7.5NVD Advisory· Published Mar 7, 2023· Updated Jun 17, 2026

CVE-2022-41333

Description

An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Fortinet/FortiRecordercpe-rescue2 versions
6.4.0+ 1 more
- (no CPE)range: 6.4.0
- (no CPE)range: <=6.4.3, <=6.0.11
Fortinet/Fortirecorder Firmware
cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*
Range: >=6.0.0,<=6.0.11

Patches

Vulnerability mechanics

References

fortiguard.com/psirt/FG-IR-22-388nvdVendor Advisory
packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.006
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000