Vulnerability · Published Dec 16, 2025 · Assigned by icscert
CVE-2025-14466Güralp Systems Fortimus Series, Minimus Series, and Certimus Series have an Allocation of Resources Without Limits or Throttling vulnerability
Medium 5.3
In plain English
A medium-severity resource allocation without limits in Certimus Series from Güralp Systems. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
A vulnerability in the web interface of the Güralp Fortimus Series, Minimus Series and Certimus Series allows an unauthenticated attacker with network access to send specially-crafted HTTP requests that can cause the web service process to deliberately restart. Although this mechanism limits the impact of the attack, it results in a brief denial-of-service condition during the restart.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Güralp Systems | Fortimus Series | All versions |
| Güralp Systems | Minimus Series | All versions |
| Güralp Systems | Certimus Series | All versions |
Weakness: CWE-770 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L