Vulnerability Description
Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Nozominetworks | Central Management Control | >= 19.0.0, <= 19.0.12 |
| Nozominetworks | Guardian | >= 19.0.0, < 19.0.12 |
Related Weaknesses (CWE)
References
- https://security.nozominetworks.com/NN-2021:2-01Vendor Advisory
- https://security.nozominetworks.com/NN-2021:2-01Vendor Advisory
FAQ
What is CVE-2021-26725?
CVE-2021-26725 is a vulnerability with a CVSS score of 7.2 (HIGH). Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected system files. This issue affects: Nozomi Netw...
How severe is CVE-2021-26725?
CVE-2021-26725 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2021-26725?
Check the references section above for vendor advisories and patch information. Affected products include: Nozominetworks Central Management Control, Nozominetworks Guardian.