Fortinet FortiOS Denial-of-Service Vulnerability via Unauthenticated Requests to GUI Endpoints

A denial-of-service vulnerability has been identified in Fortinet FortiOS. This issue affects versions 7.6.0, 7.4.4 through 7.4.0, 7.2 (all versions), 7.0 (all versions), and 6.4 (all versions). The vulnerability arises from an allocation of resources without limits or throttling, allowing remote unauthenticated attackers to disrupt access to the graphical user interface (GUI) by sending specially crafted requests to specific endpoints.

Impact

Exploitation of this vulnerability can lead to a denial-of-service condition, causing the GUI to become unresponsive and inaccessible.