Most recent entries from csaf_nozominetworks

NN-2019:1-01 — Stored XSS in field name data model

Mon, 11 Nov 2019 11:00:00 +0000

An attacker with admin access to the appliance can inject malicious code that will later be executed by another legitimate users. This allows an attacker to perform unauthorized actions on behalf of legitimate users. JavaScript injection was possible using the field name when adding new column to the data model section. The injected code will then be executed in the environment section under e.g. asset view.

NN-2019:2-01 — CSV Injection on node label

Mon, 11 Nov 2019 11:00:00 +0000

CSV Injection, also known as Formula Injection, occurs when websites embed untrusted input inside CSV files. An authenticated malicious user can insert a crafted formula in the node label that can be later executed on another system after another user has downloaded and opened the node list export.

NN-2020:2-01 — Cross-site request forgery attack on change password form

Tue, 26 May 2020 11:00:00 +0000

Change password doesn't validate CSRF token properly.

NN-2020:3-01 — Angular template injection on custom report name field

Tue, 26 May 2020 11:00:00 +0000

Report name field is affected by angular template injection which can lead to XSS attacks.

NN-2021:1-01 — Authenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4

Mon, 22 Feb 2021 11:00:00 +0000

An OS command injection vulnerability in the management interface allows an authenticated administrator to execute arbitrary OS commands gaining access to the system.

NN-2021:2-01 — Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4

Mon, 22 Feb 2021 11:00:00 +0000

An authenticated command path traversal vulnerability in the management interface allows an authenticated administrator to read-protected system files.

NN-2023:1-01 — Authenticated SQL Injection on Alerts in Guardian/CMC before 22.5.2

Wed, 03 May 2023 11:00:00 +0000

A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in the Alerts controller, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.

NN-2023:13-01 — Missing authentication for local web interface in Arc before v1.6.0

Wed, 15 May 2024 11:00:00 +0000

When configuring Arc (e.g. during the first setup), a local web interface is provided to ease the configuration process. Such web interface lacks authentication and may thus be abused by a local attacker or malware running on the machine itself.

NN-2023:14-01 — Unsafe temporary data privileges on Unix systems in Arc before v1.6.0

Wed, 15 May 2024 11:00:00 +0000

On Unix systems (Linux, MacOS), Arc uses a temporary file with unsafe privileges.

NN-2023:16-01 — Path traversal via 'zip slip' in Arc before v1.6.0

Wed, 15 May 2024 11:00:00 +0000

Multiple functions use archives without properly validating the filenames therein, rendering the application vulnerable to path traversal via 'zip slip' attacks.