NN-2023:10-01

csafUSnozomi_psirt

DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

view advisory published 2023-09-18

A published security advisory; the vulnerabilities below are the ones it describes.

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2023-32649UShigh7.5—
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our…
02

remediations (4)

  • MitigationCMC

    N/A. It is recommended to monitor the IDS log to check for abnormal stops and restarts.

  • MitigationGuardian

    N/A. It is recommended to monitor the IDS log to check for abnormal stops and restarts.

  • FixedCMC

    Upgrade to v22.6.3, v23.1.0 or later.

  • FixedGuardian

    Upgrade to v22.6.3, v23.1.0 or later.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan