Vulnerability in Nozomi Networks Cmc
CVE-2023-24015
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null. The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.
EPSS: 0.005 (37.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L.
Affected products
- Nozomi Networks Cmc — versions 0
- Nozomi Networks Guardian — versions 0
- Nozominetworks Cmc
- Nozominetworks Guardian
Weakness classification (CWE)
References
- prodsec@nozominetworks.com (Vendor Advisory)
Frequently asked questions
- What is CVE-2023-24015?
- CVE-2023-24015 is a medium-severity vulnerability in Nozomi Networks Cmc, classified under CWE-1286. CVSS score: 4.3/10. Published 2023-08-09.
- How severe is CVE-2023-24015?
- Medium severity. CVSS v3 base score is 4.3 out of 10.