CVE-2025-3719 — Incorrect authorization for CLI in Guardian/CMC before 25.2.0

CVE-2025-3719

Incorrect authorization for CLI in Guardian/CMC before 25.2.0 PUBLISHED

Description (CNA)

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/or affecting its availability.

Affected (CNA)

Vendor / product	Versions
Nozomi Networks / Guardian	affected 0 before 25.2.0
Nozomi Networks / CMC	affected 0 before 25.2.0

CWE

CWE-863

References

https://security.nozominetworks.com/NN-2025:5-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.