CVE-2023-24015

MEDIUM

Nozomi Networks CMC and Guardian < 22.6.2 - Authenticated Partial Denial of Service via Report Name Null Value

Title source: llm

Description

A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null. The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.

References (1)

Core 1

Core References

Vendor Advisory

https://security.nozominetworks.com/NN-2023:6-01

Scores

CVSS v3 4.3

EPSS 0.0045

EPSS Percentile 35.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-1286

Status published

Products (2)

nozominetworks/cmc < 22.6.2

nozominetworks/guardian < 22.6.2

Published Aug 09, 2023

Tracked Since Feb 18, 2026