title: Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0
description: A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.
Authenticated users can extract arbitrary information from the DBMS in an uncontrolled way.
problem types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
affected:
{
defaultStatus: unaffected
product: Guardian
vendor: Nozomi Networks
versions:
lessThan: 22.6.3, status: affected, version: 0, versionType: semver
lessThan: 23.1.0, status: affected, version: 23.0.0, versionType: semver
}
{
defaultStatus: unaffected
product: CMC
vendor: Nozomi Networks
versions:
lessThan: 22.6.3, status: affected, version: 0, versionType: semver
lessThan: 23.1.0, status: affected, version: 23.0.0, versionType: semver
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 7.6
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Upgrade to v22.6.3, v23.1.0 or later.
workarounds: Use internal firewall features to limit access to the web management interface.