Nozomi Networks Guardian and CMC Privilege Escalation Vulnerability

A privilege escalation vulnerability has been identified in Nozomi Networks Guardian and CMC versions prior to 24.6.0. This vulnerability allows a service account to elevate its privileges, potentially leading to administrative access. The issue arises from overly permissive sudo rules for local service accounts, which could be exploited if a malicious actor were able to execute arbitrary commands as that account. However, no such exploitation vector has been reported in this case.

Impact

The vulnerability could allow a service account to gain administrative privileges, particularly if it could execute arbitrary commands under that account.

Remediation

Users are advised to upgrade to Guardian or CMC version 24.6.0 or later.