Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0
Priority LOW 34CWE-306Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- Low · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-306.
Summary
A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication. Malicious unauthenticated users with knowledge on the underlying system may be able to extract limited asset information.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00451 39th percentileScored 2026-11-08
Fix Fixed Guardian (Nozomi Networks): 23.3.0CMC (Nozomi Networks): 23.3.0
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- Yes
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Nozomi Networks | Guardian | before 23.3.0 | 23.3.0 | Patch available | CNA |
| Nozomi Networks | CMC | before 23.3.0 | 23.3.0 | Patch available | CNA |
- Guardian VendorNozomi Networks Affected before 23.3.0 Fixed in 23.3.0 Patch available CNA
- CMC VendorNozomi Networks Affected before 23.3.0 Fixed in 23.3.0 Patch available CNA
CPE configurations NVD · 2
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:* | before 23.3.0 | Vulnerable | Nozomi Networks |
| cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:* | before 23.3.0 | Vulnerable | Nozomi Networks |
- cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:* Versions before 23.3.0 Vulnerable ·Nozomi Networks
- cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:* Versions before 23.3.0 Vulnerable ·Nozomi Networks
Remediation
- Fix · CNA Guardian (Nozomi Networks) Fixed in 23.3.0
- Fix · CNA CMC (Nozomi Networks) Fixed in 23.3.0
Timeline
- 2026-10-02 Threatist record created from CVE-2023-5253
- 2026-10-03 Alias added: GHSA-frjw-g5j9-99p6
References
More Nozomi Networks Cmc vulnerabilities
- TI-2022-00470 Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0 CVSS 4.0HIGH 8.6
- TI-2026-24526 DoS through oversized audit log entries in Guardian/CMC before 26.2.0 CVSS 4.0HIGH 8.7
- TI-2023-15926 DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 CVSS 4.0HIGH 8.2
- TI-2023-13657 SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0 CVSS 4.0CRITICAL 9.2
- TI-2023-09405 Authenticated Blind SQL Injection on alerts count in Guardian/CMC before 22.6.2 CVSS 4.0HIGH 8.7
- TI-2023-02399 Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0 CVSS 4.0HIGH 8.7
Sources
- CVE-2023-5253 · CVE Program
- CVE-2023-5253 · NVD
- FIRST EPSS
- GHSA-frjw-g5j9-99p6 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences