Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Nozomi Networks CMC, Guardian 22.6.3, 23.1.0 Clear all filters
TI-2023-15926 CVE-2023-32649 · GHSA-jwqg-83qr-7fph

DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

Priority MEDIUM 43

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker…

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00643 Published 2023-09-19 Fixed in 22.6.3, 23.1.0 CWE-1286
TI-2023-13657 CVE-2023-29245 · GHSA-86j7-6frw-pfwj

SQL Injection on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

Priority MEDIUM 43

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, may allow an unauthenticated attacker to exec…

CVSS 4.0CRITICAL 9.2 Network No auth No interaction EPSS 0.00605 Published 2023-09-19 Fixed in 22.6.3, 23.1.0 CWE-89