Lucene search

K
nvd[email protected]NVD:CVE-2023-5253
HistoryJan 15, 2024 - 11:15 a.m.

CVE-2023-5253

2024-01-1511:15:08
CWE-306
web.nvd.nist.gov
2
cve-2023-5253
websocket channel
nozomi networks guardian
cmc
authentication check
unauthenticated attacker
assets data

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication.

Malicious unauthenticated users with knowledge on the underlying system may be able to extract asset information.

Affected configurations

NVD
Node
nozominetworkscmcRange<23.3.0
OR
nozominetworksguardianRange<23.3.0

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.9%

Related for NVD:CVE-2023-5253