CMC vulnerabilities
26 known vulnerabilities in CMC from Nozomi Networks. 26 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Guardian: Improper Neutralization of Special Elements used in an OS Command
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that, when in
- 7.2 High severity
Guardian: Improper Verification of Cryptographic Signature
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent validation of the update bundle contents. An attacker with administrative privileges can remotely supply a crafted update bundle that passes sign
- 7.5 High severity
Guardian: Lack of Administrator Control over Security
An improper certificate/host key validation vulnerability was discovered in the Smart Polling functionality, which established encrypted connections to target devices without validating the remote host's identity, and no option was provided to enable it. A man
- 7.4 High severity
Guardian: Incorrect Authorization
An access control vulnerability was discovered in the Credentials Manager functionality due to insufficient validation of user privileges. A remote authenticated user with limited privileges can view a limited subset of the available entries in the Credentials
- 8.1 High severity
Guardian: Incorrect Privilege Assignment
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the
- 7.5 High severity
Guardian: Allocation of Resources Without Limits or Throttling
A denial-of-service vulnerability caused by unbounded resource allocation was discovered in the audit logging functionality, due to a missing size limit on input recorded into audit entries. An unauthenticated attacker can submit requests containing excessivel
- 7.1 High severity
Guardian: URL Redirection to Untrusted Site
An Open Redirect vulnerability was discovered in the SAML Single Sign-On functionality due to insufficient validation of a user-controlled redirection parameter. An unauthenticated attacker can craft a request to the SAML sign-in endpoint and poison the cached
- 8.9 High severity
Guardian: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting vulnerability was discovered in the Assets and Nodes functionality due to improper validation of an input parameter. An authenticated user with custom fields privileges can define a malicious custom field containing a JavaScript p
- 8.1 High severity
Guardian: Incorrect Authorization
An access control vulnerability was discovered in the Threat Intelligence functionality due to a specific access restriction not being properly enforced for users with view-only privileges. An authenticated user with view-only privileges for the Threat Intelli
- 8.1 High severity
Guardian: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validation of the input file. An authenticated user with limited privileges, by uploading a specifically-crafted Arc data archive, can potentially wr
- 8.9 High severity
Guardian: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting vulnerability was discovered in the Reports functionality due to improper validation of an input parameter. An authenticated user with report privileges can define a malicious report containing a JavaScript payload, or a victim ca
- 7.9 High severity
Guardian: Improper Neutralization of Input During Web Page Generation
A Stored Cross-Site Scripting vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter. An authenticated low-privilege user can craft a malicious dashboard containing a JavaScript payload and share it with v
- 8.1 High severity
Guardian: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and
- 8.8 High severity
Guardian: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability was discovered in the Alert functionality due to improper validation of an input parameter. An authenticated user with limited privileges can execute arbitrary SQL statements on the DBMS used by the web application, potentially ex
- 8.1 High severity
Guardian: Incorrect Authorization
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, alt
- 7.0 High severity
Guardian: Execution with Unnecessary Privileges
A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitr
- 7.2 High severity
Guardian: Improper Neutralization of Special Elements used in an OS Command
An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands. Users with administrative privileges may upload update packages to upgrade the versions of Nozomi Netw
- 7.5 High severity
Guardian: Missing Authentication for Critical Functionality
A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowl
- 7.5 High severity
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper…
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending speci
- 8.8 High severity
Guardian: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality. Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by th
- 7.4 High severity
Guardian: Improper Neutralization of Special Elements used in an SQL Command
A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to execute arbitrary SQL statements on the DBMS
- 8.8 High severity
Guardian: Improper Neutralization of Special Elements used in an SQL Command
A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the alerts_count component, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application. Authenticated
- 7.0 High severity
Guardian: Session Fixation
In certain conditions, depending on timing and the usage of the Chrome web browser, Guardian/CMC versions before 22.6.2 do not always completely invalidate the user session upon logout. Thus an authenticated local attacker may gain acces to the original user's
- 8.8 High severity
CMC: Improper Neutralization of Special Elements used in an SQL Command
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
- 7.2 High severity
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and…
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue
- 7.2 High severity
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks…
Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This