GCVE - cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:fortinet:fortirecorder_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Fortinet (`2b06c5e0-0a17-54f4-810a-5ef236d51947`)
Product	Fortirecorder Firmware (`38c74a93-8043-5616-95fb-e6452656deef`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-41333`	vulnerable	2026-06-08 05:48:30.270341	Details available MEDIUM (6.8) An uncontrolled resource consumption vulnerability [CWE-400] in FortiRecorder version 6.4.3 and below, 6.0.11 and below login authentication mechanism may allow an unauthenticated attacker to make the device unavailable via crafted GET requests. Published: 2023-03-07T16:04:43.368Z Updated: 2025-02-13T16:33:04.755Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-22-388 http://packetstormsecurity.com/files/171766/FortiRecorder-6.4.3-Denial-Of-Service.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-22297`	vulnerable	2026-06-08 05:40:08.119059	Details available MEDIUM (5.2) An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb version 6.3.0 through 6.3.17, FortiWeb all versions 6.2, FortiWeb all versions 6.1, FortiWeb all versions 6.0, FortiRecorder version 6.4.0 through 6.4.3, FortiRecorder all versions 6.0, FortiRecorder all versions 2.7 may allow an authenticated user to read arbitrary files via specially crafted command arguments. Published: 2023-03-07T16:04:48.484Z Updated: 2024-10-22T20:48:26.477Z Open on db.gcve.eu Reference links https://fortiguard.com/psirt/FG-IR-21-218	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-42757`	vulnerable	2026-06-08 05:35:22.879934	Details available MEDIUM (6.3) A buffer overflow [CWE-121] in the TFTP client library of FortiOS before 6.4.7 and FortiOS 7.0.0 through 7.0.2, may allow an authenticated local attacker to achieve arbitrary code execution via specially crafted command line arguments. Published: 2021-12-08T11:01:11.000Z Updated: 2025-10-16T09:46:26.239Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-21-173	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-6698`	vulnerable	2026-06-08 05:14:12.989565	Details available Use of Hard-coded Credentials vulnerability in FortiRecorder all versions below 2.7.4 may allow an unauthenticated attacker with knowledge of the aforementioned credentials and network access to FortiCameras to take control of those, provided they are managed by a FortiRecorder device. Published: 2019-08-23T19:58:39.000Z Updated: 2024-10-25T14:29:00.440Z Open on db.gcve.eu Reference links https://fortiguard.com/advisory/FG-IR-19-185	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.