Most recent entries from csaf_nozominetworks

NN-2019:1-01 — Stored XSS in field name data model

Mon, 11 Nov 2019 11:00:00 +0000

An attacker with admin access to the appliance can inject malicious code that will later be executed by another legitimate users. This allows an attacker to perform unauthorized actions on behalf of legitimate users. JavaScript injection was possible using the field name when adding new column to the data model section. The injected code will then be executed in the environment section under e.g. asset view.

NN-2019:2-01 — CSV Injection on node label

Mon, 11 Nov 2019 11:00:00 +0000

CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. An authenticated malicious user can insert a crafted formula in the node label that can be later executed on another system after another user has downloaded and opened the node list export.

NN-2020:2-01 — Cross-site request forgery attack on change password form

Tue, 26 May 2020 11:00:00 +0000

Change password doesn't validate CSRF token properly.

NN-2020:3-01 — Angular template injection on custom report name field

Tue, 26 May 2020 11:00:00 +0000

Report name field is affected by angular template injection which can lead to XSS attacks.

NN-2021:1-01 — Authenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4

Mon, 22 Feb 2021 11:00:00 +0000

An OS command injection vulnerability in the management interface allows an authenticated administrator to execute arbitrary OS commands gaining access to the system.

NN-2021:2-01 — Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4

Mon, 22 Feb 2021 11:00:00 +0000

An authenticated command path traversal vulnerability in the management interface allows an authenticated administrator to read-protected system files.

NN-2022:2-01 — Authenticated RCE on logo report upload in Guardian/CMC before 22.0.0

Mon, 14 Feb 2022 11:00:00 +0000

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges.

NN-2022:2-02 — Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Mon, 14 Feb 2022 11:00:00 +0000

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges.

NN-2023:1-01 — Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2

Wed, 03 May 2023 11:00:00 +0000

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the Alerts controller, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

NN-2023:2-01 — Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2

Wed, 09 Aug 2023 11:00:00 +0000

A blind SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the sorting parameter, allows an authenticated attacker to execute arbitrary SQL statements on the DBMS used by the web application.