Description
A partial DoS vulnerability has been detected in the Reports section, exploitable by a malicious authenticated user forcing a report to be saved with its name set as null.
The reports section will be partially unavailable for all later attempts to use it, with the report list seemingly stuck on loading.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nozomi Networks | Guardian | < 22.6.2 | 22.6.2 |
| Nozomi Networks | CMC | < 22.6.2 | 22.6.2 |
Advisories 2
- ICSA-23-285-07 Siemens RUGGEDCOM APE180 CISA ICS & IT advisories · May 14, 2024
- SSA-647455 SSA-647455: Multiple Vulnerabilities in Nozomi Guardian/CMC before 22.6.2 on RUGGEDCOM APE1808 devices Siemens ProductCERT · May 14, 2024