PT-2021-17115 · Nozomi Networks · Nozomi Networks Cmc+1

Erik De Jong · Published 2021-02-22 · Updated 2024-05-28 · CVE-2021-26724

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Nozomi Networks Guardian versions 20.0.7.3 and prior versions Nozomi Networks CMC versions 20.0.7.3 and prior versions

Description The issue is an OS Command Injection vulnerability that occurs when changing date settings or hostname using the web GUI of Nozomi Networks Guardian and CMC. This allows authenticated administrators to perform remote code execution.

Recommendations For Nozomi Networks Guardian versions 20.0.7.3 and prior versions, update to a version that fixes this issue. For Nozomi Networks CMC versions 20.0.7.3 and prior versions, update to a version that fixes this issue. As a temporary workaround, consider restricting access to the web GUI for changing date settings or hostname until a patch is available.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-26724

Affected Products

Nozomi Networks Cmc

Nozomi Networks Guardian

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26724 · Security Note
• https://osv.dev/vulnerability/CVE-2021-26724 · Vendor Advisory
• https://security.nozominetworks.com/NN-2021:1-01 · Vendor Advisory
• https://t.me/cvenotify/81115 · Telegram Post
• https://t.me/cibsecurity/23952 · Telegram Post