Nozomi Networks Guardian and CMC SQL Injection Vulnerability in Alert Functionality

A SQL injection vulnerability has been identified in the Alert feature of Nozomi Networks Guardian and CMC versions prior to 25.2.0. This vulnerability arises from inadequate validation of an input parameter, allowing an authenticated user with limited privileges to execute arbitrary SQL commands on the application's database management system. Exploitation of this vulnerability could lead to unauthorized data exposure, modification of data structure and content, or disruption of data availability.

Impact

Exploitation allows authenticated users with limited privileges to execute arbitrary SQL statements, potentially leading to unauthorized data access, data modification, or disruption of database availability.

Remediation

Users are advised to upgrade to version 25.2.0 or later. Additionally, internal firewall features can be used to restrict access to the web management interface, and accounts with unnecessary access should be reviewed and deleted.