Nozomi Networks Guardian and CMC Incorrect Privilege Assignment Vulnerability in Arc Sensors

A vulnerability allowing incorrect privilege assignment has been identified in Nozomi Networks Guardian and CMC versions prior to 26.2.0. This vulnerability arises from Arc sensors receiving command-line interface (CLI) permissions, which should not be granted. As a result, an authenticated user with limited privileges can exploit this issue by sending administrative CLI commands through the synchronization functionality. This exploitation can lead to unauthorized changes in device configuration and potentially disrupt the device's availability.

Impact

Exploitation of this vulnerability allows authenticated users with limited privileges to execute administrative CLI commands on Arc sensors, modifying device configurations and possibly causing availability issues.

Remediation

Users are advised to upgrade to Nozomi Networks Guardian or CMC version 26.2.0 or later. Additionally, review all enabled Arc sensors and remove or disable any untrusted ones.