← CVE Intelligence

CVE-2022-0551

Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0 PUBLISHED

Description (CNA)

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.

Affected (CNA)

Vendor / productVersions
Nozomi Networks / Guardianaffected unspecified before 22.0.0
Nozomi Networks / CMCaffected unspecified before 22.0.0

CWE

CWE-20

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.