Vulnerability · Published Jun 10, 2025 · Assigned by Nozomi
CVE-2024-13090Privilege escalation in Guardian/CMC before 24.6.0
High 7.0
In plain English
A high-severity security flaw in CMC from Nozomi Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Official description
A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account. It is important to note that no such vector has been identified in this instance.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nozomi Networks | Guardian | 0 – before 24.6.0 |
| Nozomi Networks | CMC | 0 – before 24.6.0 |
Weakness: CWE-250 · Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H