Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Nozomi Networks CMC, Guardian 22.0.0 Clear all filters
TI-2022-00470 CVE-2022-0551 · GHSA-r8jv-c3jp-366j

Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Priority MEDIUM 45

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00904 Published 2022-03-24 Fixed in 22.0.0 CWE-20
TI-2022-00469 CVE-2022-0550 · GHSA-8rv9-5fv4-653w

Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0

Priority LOW 39

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the applianc…

CVSS 4.0HIGH 8.6 Network High privileges No interaction EPSS 0.00904 Published 2022-03-24 Fixed in 22.0.0 CWE-20