Nozomi Networks Guardian and CMC OS Command Injection Vulnerability in Update Functionality

A command injection vulnerability has been identified in the update functionality of Nozomi Networks Guardian and CMC, affecting versions prior to 24.6.0. This vulnerability allows authenticated administrators to execute arbitrary operating system commands. While update packages are signed and their signatures are validated before installation, an improper signature validation check has been discovered. This flaw could enable remote command execution on the appliance, impacting its confidentiality, integrity, and availability.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of operating system commands on the affected appliance, potentially allowing for further exploitation or manipulation of the system.

Remediation

Users are advised to upgrade to version 24.6.0 or later. Only install update packages from trusted sources.