Skip to content
OpenAdvisories
High · 7.0 CVE-2024-13090 EUVD-2024-54661GHSA-55jr-mfpr-5vwv

Privilege escalation in Guardian/CMC before 24.6.0

Published Jun 10, 2025 · Updated Jun 10, 2025 · Assigned by Nozomi

Description

A privilege escalation vulnerability may enable a service account to elevate its privileges.

The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account.

It is important to note that no such vector has been identified in this instance.

Affected products

VendorProductAffectedFixed
Nozomi Networks Guardian < 24.6.0 24.6.0
Nozomi Networks CMC < 24.6.0 24.6.0

Advisories 2

References