PT-2023-5522 · Nozomi · Nozomi Guardian+1
Stefano Libero
·
Publicado
2023-08-09
·
Atualizado
2024-09-20
·
CVE-2023-24015
CVSS v3.1
4.3
Média
| Vetor | AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L |
Name of the Vulnerable Software and Affected Versions
Nozomi Guardian and Nozomi Central Management Console (CMC) (affected versions not specified)
Description
A partial Denial of Service (DoS) issue has been identified in the Reports section. This issue can be exploited by a malicious authenticated user who forces a report to be saved with its name set as null, specifically by setting the
name variable to null. The exploitation of this issue may cause the reports section to be partially unavailable for subsequent attempts to use it, with the report list appearing to be stuck on loading. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Nozomi Central Management Console
Nozomi Guardian