Nozomi Networks

Records65All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high31CVSS 7.0–8.9

Exploited now

Nozomi Networks records in CISA KEV

No Nozomi Networks vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Guardian 41 records MEDIUM Cmc 38 records MEDIUM Central Management Control 2 records MEDIUM Arc 1 record LOW

Records

2 records in Central Management Control · all components

TI-2021-08402 CVE-2021-26724 · GHSA-h84w-4wfq-6h9c

Authenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4

MEDIUM 42

OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.02769 Published 2021-02-22 No fix listed CWE-78

TI-2021-08403 CVE-2021-26725 · GHSA-4jgg-xq73-m9g4

Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4

MEDIUM 41

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files.

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.01097 Published 2021-02-22 No fix listed CWE-24

Open these records in search →

Critical	1
High	31
Medium	30
Low	3
No CVSS	0