Nozomi Networks Guardian and CMC Access Control Vulnerability in CLI Functionality

An access control vulnerability has been identified in the Command Line Interface (CLI) functionality of Nozomi Networks Guardian and CMC versions prior to 25.2.0. This vulnerability arises from improper enforcement of access restrictions, allowing authenticated users with limited privileges to execute administrative CLI commands. As a result, these users can modify device configurations and potentially disrupt the device's availability.

Impact

Exploitation of this vulnerability allows authenticated users with limited privileges to execute administrative commands via the CLI, enabling them to change device configurations and impact the device's availability.

Remediation

Users are advised to upgrade to version 25.2.0 or later. Additionally, internal firewall features can be used to restrict access to the web management interface, and accounts with unnecessary access should be reviewed and deleted.