Nozominetworks vulnerabilities
We track 5 vulnerabilities in Nozominetworks products across 3 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on May 15, 2024.
Latest Nozominetworks vulnerabilities
- 7.8 High severity
Arc: Incorrect Permission Assignment for Critical Resource
On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges. By tampering with such file, a malicious local user in the system may be able to trigger arbitrary code execution with root privileges.
- 7.4 High severity
Arc: Missing Authentication for Critical Functionality
When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself. A malicious lo
- 7.5 High severity
Guardian: Improper Validation of Syntactic Correctness of Input
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packe
- 8.8 High severity
CMC: Improper Neutralization of Special Elements used in an SQL Command
Due to improper input validation in the Alerts controller, a SQL injection vulnerability in Nozomi Networks Guardian and CMC allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
- 7.2 High severity
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and…
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue