Vulnerability · Published Sep 19, 2023 · Assigned by Nozomi
CVE-2023-32649DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
High 7.5
In plain English
A high-severity security flaw in CMC from Nozomi Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Official description
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets. During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nozomi Networks | Guardian | 22.6.0 – before 22.6.323.0.0 – before 23.1.0 |
| Nozomi Networks | CMC | 22.6.0 – before 22.6.323.0.0 – before 23.1.0 |
Weakness: CWE-1286 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H