The vulnerability of the WebSocket component in the Nozomi Guardian network detection and monitoring tool, as well as the Nozomi Central Management Console (CMC) – a centralized security management tool – allows attackers to influence the confidentiality of the protected information.

WebSocket in Nozomi Guardian and Console lacks authentication for critical functions, risking confidentiality.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2023-5253	15 Jan 202412:26	–	circl
CNNVD	Nozomi Networks Guardian/CMC Access Control Error Vulnerability	15 Jan 202400:00	–	cnnvd
CVE	CVE-2023-5253	15 Jan 202410:53	–	cve
Cvelist	CVE-2023-5253 Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0	15 Jan 202410:53	–	cvelist
EUVD	EUVD-2023-57578	3 Oct 202520:07	–	euvd
ICS	Siemens RUGGEDCOM APE1808	13 Feb 202400:00	–	ics
NCSC	Vulnerabilities fixed in Siemens products	13 Feb 202400:00	–	ncsc
NOZOMI	Check Point IoT integration: WebSocket returns assets data without authentication in Guardian/CMC before 23.3.0	15 Jan 202400:00	–	nozomi
NVD	CVE-2023-5253	15 Jan 202411:15	–	nvd
OSV	CVE-2023-5253	15 Jan 202411:15	–	osv