Vulnerability · Published Feb 22, 2021 · Assigned by Nozomi
CVE-2021-26724Authenticated command injection when changing date settings or hostname in Guardian/CMC before 20.0.7.4
High 7.2
In plain English
A high-severity OS command injection in CMC from Nozomi Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.8% (higher than 86% of all known vulnerabilities).
Severity (CVSS 3.1)7.2High
Exploit odds (30 days)2.8%top 13.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nozomi Networks | Guardian | 20.0.7.3 and prior versions |
| Nozomi Networks | CMC | 20.0.7.3 and prior versions |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
References
- https://security.nozominetworks.com/NN-2021:1-01 x_refsource_CONFIRM