CVE-2024-46667

Summary

CVE-2024-46667 is a vulnerability affecting multiple versions of Fortinet FortiSIEM, including 5.3, 5.4, 6.x, 7.0, and 7.1.0-7.1.5. This issue arises from an uncontrolled resource consumption issue, where resources are allocated without limits or throttling. An attacker can exploit this flaw by flooding the system with TLS traffic, consuming all available connections, and thereby denying valid TLS traffic. This vulnerability poses a significant risk to organizations using FortiSIEM for securing their networks, as it can lead to a denial of service condition. It is recommended that affected organizations apply the appropriate security patches as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.