CVE-2019-17657

Description

An Uncontrolled Resource Consumption vulnerability in Fortinet FortiSwitch below 3.6.11, 6.0.6 and 6.2.2, FortiAnalyzer below 6.2.3, FortiManager below 6.2.3 and FortiAP-S/W2 below 6.2.2 may allow an attacker to cause admin webUI denial of service (DoS) via handling special crafted HTTP requests/responses in pieces slowly, as demonstrated by Slow HTTP DoS Attacks.

Risk Information

Base Score

7.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.777

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-15708 ,CVE-2019-17657 are affected in fortiap-s 6.2.1	NCM
Vulnerabilities CVE-2019-15708 ,CVE-2019-17657 are affected in fortiap-w2 6.2.1	NCM
Vulnerabilities CVE-2019-17657 are affected in fortianalyzer 6.2.2	NCM
Vulnerabilities CVE-2019-17657 are affected in fortimanager 6.2.2	NCM
Vulnerabilities CVE-2019-17657 are affected in fortiswitch 6.2.1	NCM
Uncontrolled Resource Consumption Vulnerability (CVE-2019-17657)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234