The vulnerability of the Nozomi Guardian detection and tracking tool for network activities, as well as the Nozomi Central Management Console (CMC) – a central management tool for security operations – stems from the lack of protective measures for the SQL query structure. This allows attackers to gain unauthorized access to protected information and execute arbitrary SQL queries.

Nozomi Guardian and Central Management Console vulnerable to unsecured SQL in parameter sorting, enabling unauthorized access.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2023-22378	9 Aug 202312:16	–	circl
CNNVD	Nozomi Networks Guardian/CMC SQL Injection Vulnerability	9 Aug 202300:00	–	cnnvd
CVE	CVE-2023-22378	9 Aug 202308:01	–	cve
Cvelist	CVE-2023-22378 Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2	9 Aug 202308:01	–	cvelist
EUVD	EUVD-2023-26541	3 Oct 202520:07	–	euvd
ICS	Siemens RUGGEDCOM APE180	10 Oct 202300:00	–	ics
NOZOMI	Authenticated Blind SQL Injection on sorting in Guardian/CMC before 22.6.2	9 Aug 202300:00	–	nozomi
NVD	CVE-2023-22378	9 Aug 202309:15	–	nvd
OSV	CVE-2023-22378	9 Aug 202309:15	–	osv
Prion	Sql injection	9 Aug 202309:15	–	prion