Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jwqg-83qr-7fph

Опубликовано: 19 сент. 2023
Источник: github
Github: Не прошло ревью
CVSS4: 8.2
CVSS3: 7.5

Описание

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.

During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.

During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.

EPSS

Процентиль: 33%
0.00132
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-1286
CWE-20

Связанные уязвимости

CVSS3: 7.5
nvd
больше 2 лет назад

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets. During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.

EPSS

Процентиль: 33%
0.00132
Низкий

8.2 High

CVSS4

7.5 High

CVSS3

Дефекты

CWE-1286
CWE-20