Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-3719

Incorrect authorization for CLI in Guardian/CMC before 25.2.0

Description

An access control vulnerability was discovered in the CLI functionality due to a specific access restriction not being properly enforced for users with limited privileges. An authenticated user with limited privileges can issue administrative CLI commands, altering the device configuration, and/or affecting its availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Guardian

Default version status: unaffected

  • 0 to < 25.2.0affected

Nozomi Networks CMC

Default version status: unaffected

  • 0 to < 25.2.0affected

References