CVE-2024-0218— DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
Quick assessment
Affected
Nozomi Networks Guardian
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Nozomi Networks Guardian是美国Nozomi Networks公司的一款物联网设备和软件检查系统。 Nozomi Networks Guardian存在安全漏洞，该漏洞源于对某些字段的输入验证不当。
Possible ATT&CK Techniques 1 AI
T1499 · Endpoint Denial of Service
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2024-0218
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1
Source: CVE Program / CVE List V5
Vulnerability Description
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop updating nodes, links, and assets.
Network traffic may not be analyzed until the IDS module is restarted.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1286
Source: CVE Program / CVE List V5
Vulnerability Title
Nozomi Networks Guardian 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Nozomi Networks Guardian是美国Nozomi Networks公司的一款物联网设备和软件检查系统。 Nozomi Networks Guardian存在安全漏洞，该漏洞源于对某些字段的输入验证不当。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Nozomi Networks | Guardian | 0 ~ 23.4.1 | - |
|
II. Public POCs for CVE-2024-0218
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2024-0218
请登录查看更多情报信息。
Other References for CVE-2024-0218 (1)
IV. Related Vulnerabilities
Same product: Guardian
-
CVE-2026-33920
Cross-site request forgery in the Guardian/CMC login before -
CVE-2026-33391
Incorrect authorization in Smart Polling configuration in Gu -
CVE-2026-33389
Disabled and non-configurable certificate/host key validatio -
CVE-2026-33388
Incorrect authorization in Credentials Manager in Guardian/C -
CVE-2026-33387
Insufficient sanitization of Dashboards in Guardian/CMC befo
Same vendor: Nozomi Networks
-
CVE-2026-33920
Cross-site request forgery in the Guardian/CMC login before -
CVE-2026-33391
Incorrect authorization in Smart Polling configuration in Gu -
CVE-2026-33389
Disabled and non-configurable certificate/host key validatio -
CVE-2026-33388
Incorrect authorization in Credentials Manager in Guardian/C -
CVE-2026-33387
Insufficient sanitization of Dashboards in Guardian/CMC befo
Same weakness: CWE-1286
-
CVE-2026-100902
Barco ClickShare CX-20 Gen2 Wallpaper Upload wallpaper impro -
CVE-2026-87080
Net::IDN::Punycode::PP versions before 2.590 for Perl decode -
CVE-2026-83611
xmldom: Parser silently accepts a not-well-formed end tag wh -
CVE-2026-0931
Denial-of-service vulnerability in M-Files Server -
CVE-2026-25292
Improper Validation of Syntactic Correctness of Input in Aut
V. Comments for CVE-2024-0218
No comments yet