Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0
Vulnerability Description
Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
输入验证不恰当
Vulnerability Title
Nozomi Networks Guardian 输入验证错误漏洞
Vulnerability Description
Nozomi Networks Guardian是瑞士Nozomi Networks公司的一款物联网设备和软件检查系统。 Nozomi Networks Guardian 22.0.0 之前的版本存在安全漏洞，该漏洞允许具有管理员或导入管理员角色的经过身份验证的攻击者使用 Web 服务器用户权限在设备上执行无人值守的命令。
CVSS Information
N/A
Vulnerability Type
N/A