CVE-2023-32649: DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0
A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain fields used in the Asset Intelligence functionality of our IDS, allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.
During the (limited) time window before the IDS module is automatically restarted, network traffic may not be analyzed.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-32649?
CVE-2023-32649 is a Denial of Service (DoS) vulnerability in Nozomi Networks Guardian and CMC.
How does CVE-2023-32649 impact Nozomi Networks Guardian and CMC?
CVE-2023-32649 allows an unauthenticated attacker to crash the IDS module by sending specially crafted malformed network packets.
What is the severity level of CVE-2023-32649?
CVE-2023-32649 has a severity level of high.
Which versions of Nozomi Networks Guardian and CMC are affected by CVE-2023-32649?
Versions 22.6.0 to 22.6.3 and versions 23.0.0 to 23.1.0 of Nozomi Networks Guardian and CMC are affected by CVE-2023-32649.
How can CVE-2023-32649 be mitigated?
To mitigate CVE-2023-32649, it is recommended to update Nozomi Networks Guardian and CMC to a version that is not affected.