An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/or affecting its availability.
Fix
Patch, vendor advisory and mitigation references on NVD 1
- https://security.nozominetworks.com/NN-2025:5-01 Vendor Advisory
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 1
- First seenCVSS 7.2 · nozominetworksNVD modified 2026-10-18 21:10
Affected (CPE criteria) 2
cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:*cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*
References 1
- https://security.nozominetworks.com/NN-2025:5-01 Vendor Advisory