CVE-2023-24015: fallo de gravedad media en Nozomi Networks Guardian
Partial DoS on Reports section due to null report name in Guardian/CMC before 22.6.2
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 5.3epss 0.5%
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null.
The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N
CVEs relacionadas — Nozomi Networks Guardian
En el mismo producto, de las más peligrosas a las menos.
CVE-2021-26724HIGHAuthenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4EPSS 2.8%CVE-2026-33924HIGHAuthenticated RCE in update functionality in Guardian/CMC before 26.4.0EPSS 1.1%CVE-2021-26725HIGHAuthenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4EPSS 1.1%CVE-2024-13089HIGHAuthenticated RCE in update functionality in Guardian/CMC before 24.6.0EPSS 1.1%CVE-2022-0551HIGHAuthenticated RCE on project configuration import in Guardian/CMC before 22.0.0EPSS 0.9%CVE-2022-0550HIGHAuthenticated RCE on logo report upload in Guardian/CMC before 22.0.0EPSS 0.9%