Description
An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error.
The whole application in rendered unusable until a console intervention.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nozomi Networks | Guardian | < 22.6.2 | 22.6.2 |
| Nozomi Networks | CMC | < 22.6.2 | 22.6.2 |
Advisories 2
- ICSA-23-285-07 Siemens RUGGEDCOM APE180 CISA ICS & IT advisories · May 14, 2024
- SSA-647455 SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices Siemens ProductCERT · May 14, 2024