CVE-2022-0551 Authenticated RCE on project configuration import in Guardian/CMC before 22.0.0

Improper Input Validation vulnerability in project file upload in Nozomi Networks Guardian and CMC allows an authenticated attacker with admin or import manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian...

CVE-2022-0551

CVE-2022-0551 concerns Nozomi Networks Guardian and Nozomi Networks CMC prior to version 22.0.0. The vulnerability is an improper input validation flaw in the project file upload feature, allowing an authenticated attacker with admin or import manager roles to execute unattended commands on the a...