CVE-2024-46667

Status: AnalyzedHigh (7.5)—

A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections.

CVSS

Version: 3.1
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Base score: 7.5

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 0.59%
Percentile among all scored CVEs: 47
Score date: 10/5/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

🎯 ATT&CK techniques

How this vulnerability is exploited and what the attacker gains, in MITRE ATT&CK terms.

ExploitationT1190 Exploit Public-Facing Applicationinitial access60 %
Primary impactT1499 Endpoint Denial of Serviceimpact55 %

Inferred by deterministic rules from the CVSS vector and CWE. Indicative only.

🛡️ ATT&CK mitigations that cover these techniques

Filter Network Traffic Vulnerability Scanning Privileged Account Management Network Segmentation Limit Access to Resource Over Network Application Isolation and Sandboxing

Affected technologies (1)

Fortinet — Fortisiem

CWEs

CWE-770

References

https://fortiguard.fortinet.com/psirt/FG-IR-24-164

Raw JSON (NVD)

Show

{
  "id": "CVE-2024-46667",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-46667",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2025-01-14T14:27:09.560945Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "psirt@fortinet.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.5,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "NONE"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "psirt@fortinet.com",
      "affectedData": [
        {
          "vendor": "Fortinet",
          "product": "FortiSIEM",
          "versions": [
            {
              "status": "affected",
              "version": "7.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "7.1.5"
            },
            {
              "status": "affected",
              "version": "7.0.0",
              "versionType": "semver",
              "lessThanOrEqual": "7.0.3"
            },
            {
              "status": "affected",
              "version": "6.7.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.7.9"
            },
            {
              "status": "affected",
              "version": "6.6.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.6.5"
            },
            {
              "status": "affected",
              "version": "6.5.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.5.3"
            },
            {
              "status": "affected",
              "version": "6.4.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.4.4"
            },
            {
              "status": "affected",
              "version": "6.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.3.3"
            },
            {
              "status": "affected",
              "version": "6.2.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.2.1"
            },
            {
              "status": "affected",
              "version": "6.1.0",
              "versionType": "semver",
              "lessThanOrEqual": "6.1.2"
            },
            {
              "status": "affected",
              "version": "5.4.0"
            },
            {
              "status": "affected",
              "version": "5.3.0",
              "versionType": "semver",
              "lessThanOrEqual": "5.3.3"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2025-01-14T14:15:31.797",
  "references": [
    {
      "url": "https://fortiguard.fortinet.com/psirt/FG-IR-24-164",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "psirt@fortinet.com"
    }
  ],
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "psirt@fortinet.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-770"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "A allocation of resources without limits or throttling in Fortinet FortiSIEM 5.3 all versions, 5.4 all versions, 6.x all versions, 7.0 all versions, and 7.1.0 through 7.1.5 may allow an attacker to deny valid TLS traffic via consuming all allotted connections."
    },
    {
      "lang": "es",
      "value": "Una asignación de recursos sin límites ni limitación en Fortinet FortiSIEM 5.3 todas las versiones, 5.4 todas las versiones, 6.x todas las versiones, 7.0 todas las versiones y 7.1.0 a 7.1.5 puede permitir que un atacante deniegue tráfico TLS válido mediante el consumo de todas las conexiones asignadas."
    }
  ],
  "lastModified": "2026-06-17T07:55:41.380",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A0258A88-352D-4F9A-894D-F7442CAFE461",
              "versionEndIncluding": "5.3.3",
              "versionStartIncluding": "5.3.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24480037-F5CE-4CCE-800D-8C707B7F36AF",
              "versionEndIncluding": "6.1.2",
              "versionStartIncluding": "6.1.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3345EC56-9176-4463-A0B0-88267618383E",
              "versionEndIncluding": "6.2.1",
              "versionStartIncluding": "6.2.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D9FC4C46-F269-4635-80BE-BED292538FEF",
              "versionEndIncluding": "6.3.3",
              "versionStartIncluding": "6.3.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0320CE9C-6A73-44B9-90F5-B166E39D4EF6",
              "versionEndIncluding": "6.4.4",
              "versionStartIncluding": "6.4.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "95BF2F4C-084C-4BA7-9135-C970504E5682",
              "versionEndIncluding": "6.5.3",
              "versionStartIncluding": "6.5.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9BEF7191-7173-42FE-BEEE-0D956B1DCEE7",
              "versionEndIncluding": "6.6.5",
              "versionStartIncluding": "6.6.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3BD3264-378E-407A-A964-68A5F5BF9C91",
              "versionEndIncluding": "6.7.9",
              "versionStartIncluding": "6.7.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "3E588953-625A-477F-832C-D18C34A6BC66",
              "versionEndIncluding": "7.0.3",
              "versionStartIncluding": "7.0.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "18D56E3E-931D-45D0-A7F9-F039DB99AA8F",
              "versionEndExcluding": "7.1.6",
              "versionStartIncluding": "7.1.0"
            },
            {
              "criteria": "cpe:2.3:a:fortinet:fortisiem:5.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "91E43A1B-D4C5-4FFF-9D3E-00140023921E"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "psirt@fortinet.com"
}