Fortinet Fortirecorder Firmware vulnerabilities

5 CVEs affecting Fortinet Fortirecorder Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-41333, published 2023-03-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-41333, published 2023-03-07. High severity, CVSS 7.5. EPSS: 7.2% chance of exploitation in the next 30 days. An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make…
CVE-2019-6698, published 2019-08-23. Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days. Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to…
CVE-2021-42757, published 2021-12-08. Medium severity, CVSS 6.7. EPSS: 0.5% chance of exploitation in the next 30 days. A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via…
CVE-2021-42755, published 2022-07-18. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. An integer overflow / wraparound vulnerability [CWE-190] in FortiSwitch 7.0.2 and below, 6.4.9 and below, 6.2.x, 6.0.x; FortiRecorder 6.4.2 and below, 6.0.10 and below; FortiOS 7.0.2 and below, 6.4.8…
CVE-2022-22297, published 2023-03-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through…