7.5
Élevée
CVE-2024-13089 An OS command injection vulnerability within the update functionality may allow an authenticated administrator to…
Description
An OS command injection vulnerability within the update functionality may allow an authenticated administrator to execute unauthorized arbitrary OS commands. Users with administrative privileges may upload update packages to upgrade the versions of Nozomi Networks Guardian and CMC. While these updates are signed and their signatures are validated prior to installation, an improper signature validation check has been identified. This issue could potentially enable users to execute commands remotely on the appliance, thereby impacting confidentiality, integrity, and availability.
Produits et versions touchés
Autres CVE de Guardian
Les 53 CVE de Guardian →
CVE-2026-33924
Two OS command injection vulnerabilities were discovered in the update installation functionality due to insufficient…
7.5
Élevée
CVE-2026-33923
A signature verification vulnerability was discovered in the update installation functionality due to inconsistent…
7.5
Élevée
CVE-2026-33920
A cross-site request forgery vulnerability was discovered in the login functionality (both standard and SAML) due to…
5.1
Moyenne
CVE-2026-33391
An access control vulnerability was discovered in the Smart Polling configuration functionality due to insufficient…
5.3
Moyenne