What is CVE-2023-23903?

CVE-2023-23903 is a medium-severity vulnerability in Nozomi Networks Cmc, classified under CWE-1286. CVSS score: 4.9/10. Published 2023-08-09.

How severe is CVE-2023-23903?

Medium severity. CVSS v3 base score is 4.9 out of 10.

Vulnerability in Nozomi Networks Cmc

CVE-2023-23903

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.

EPSS: 0.005 (40.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H.

Affected products

Nozomi Networks Cmc — versions 0
Nozomi Networks Guardian — versions 0
Nozominetworks Cmc
Nozominetworks Guardian

Weakness classification (CWE)

CWE-1286

References

prodsec@nozominetworks.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-23903?: CVE-2023-23903 is a medium-severity vulnerability in Nozomi Networks Cmc, classified under CWE-1286. CVSS score: 4.9/10. Published 2023-08-09.
How severe is CVE-2023-23903?: Medium severity. CVSS v3 base score is 4.9 out of 10.