PT-2023-5522

CVE-2023-24015

·

Publicado

2023-08-09

·

Atualizado

2024-09-20

Descrição por

CVSS 3.1
4.3
Média
MétricasAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Name of the Vulnerable Software and Affected Versions Nozomi Guardian and Nozomi Central Management Console (CMC) (affected versions not specified)
Description A partial Denial of Service (DoS) issue has been identified in the Reports section. This issue can be exploited by a malicious authenticated user who forces a report to be saved with its name set as null, specifically by setting the name variable to null. The exploitation of this issue may cause the reports section to be partially unavailable for subsequent attempts to use it, with the report list appearing to be stuck on loading. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾