Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2025-40889

Path traversal in Time Machine functionality in Guardian/CMC before 25.2.0

Description

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input parameters. An authenticated user with limited privileges, by issuing a specifically-crafted request, can potentially alter the structure and content of files in the /data folder, and/or affect their availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Nozomi Networks Guardian

Default version status: unaffected

  • 0 to < 25.2.0affected

Nozomi Networks CMC

Default version status: unaffected

  • 0 to < 25.2.0affected

References