CVE-2023-32649

HIGH

7.5

Description

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets. During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.

CVE Details

CVSS v3.1 Score7.5

SeverityHIGH

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionNONE

Published9/19/2023

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

nozominetworks:cmcnozominetworks:guardian

Weaknesses (CWE)

CWE-1286CWE-20

References

https://security.nozominetworks.com/NN-2023:10-01(prodsec@nozominetworks.com)

https://security.nozominetworks.com/NN-2023:10-01(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.