Vulnerability · Published Oct 7, 2025 · Assigned by Nozomi
CVE-2025-3719Incorrect authorization for CLI in Guardian/CMC before 25.2.0
High 8.1
In plain English
A high-severity incorrect authorization in CMC from Nozomi Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 20% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.3%top 80.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/or affecting its availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Nozomi Networks | Guardian | 0 – before 25.2.0 |
| Nozomi Networks | CMC | 0 – before 25.2.0 |
Weakness: CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H