Input validation

2023-09-1911:16:00

PRIOn knowledge base

www.prio-n.com

input validation

denial of service

nozomi networks

guardian

cmc

asset intelligence

ids

network packets

network traffic analysis

0.001 Low

EPSS

Percentile

20.8%

JSON

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.

During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.

CPENameOperatorVersion
cmcge23.0.0
cmclt23.1.0
cmcge22.6.0
cmclt22.6.3
guardiange23.0.0
guardianlt23.1.0
guardiange22.6.0
guardianlt22.6.3

Name	Operator	Version
cmc	ge	23.0.0
cmc	lt	23.1.0
cmc	ge	22.6.0
cmc	lt	22.6.3
guardian	ge	23.0.0
guardian	lt	23.1.0
guardian	ge	22.6.0
guardian	lt	22.6.3

References

security.nozominetworks.com/NN-2023:10-01

0.001 Low

EPSS

Percentile

20.8%

JSON

Related for PRION:CVE-2023-32649