{ "document": { "aggregate_severity": { "text": "HIGH" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en-US", "notes": [ { "category": "other", "text": "Medium", "title": "Risk Level for Nozomi customers" } ], "publisher": { "category": "vendor", "contact_details": "Nozomi Networks Product Security team can be reached at prodsec@nozominetworks.com", "name": "Nozomi Networks Product Security", "namespace": "https://security.nozominetworks.com/psirt" }, "title": "Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0", "tracking": { "aliases": [ "CVE-2023-2567" ], "current_release_date": "2024-09-19T11:00:00.000Z", "id": "NN-2023:9-01", "initial_release_date": "2023-09-18T11:00:00.000Z", "revision_history": [ { "date": "2023-09-18T11:00:00.000Z", "number": "1", "summary": "Initial revision" }, { "date": "2023-11-13T11:00:00.000Z", "number": "2", "summary": "Migrated to CSAF VEX format" }, { "date": "2023-11-16T11:00:00.000Z", "number": "3", "summary": "CSAF vers improvements" }, { "date": "2024-05-20T11:00:00.000Z", "number": "4", "summary": "Added CVSS v4.0 scoring where applicable" }, { "date": "2024-09-19T11:00:00.000Z", "number": "5", "summary": "Revised the CVSS scoring and improved the issue description" } ], "status": "final", "version": "5" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:gem/<22.6.3", "product": { "name": "Nozomi Networks Guardian <22.6.3", "product_id": "CSAFPID-0001" } }, { "category": "product_version_range", "name": "vers:gem/>=23.0.0|<23.1.0", "product": { "name": "Nozomi Networks Guardian >=23.0.0|<23.1.0", "product_id": "CSAFPID-0002" } }, { "category": "product_version", "name": "22.6.3", "product": { "name": "Nozomi Networks Guardian 22.6.3", "product_id": "CSAFPID-0003" } }, { "category": "product_version", "name": "23.1.0", "product": { "name": "Nozomi Networks Guardian 23.1.0", "product_id": "CSAFPID-0004" } } ], "category": "product_name", "name": "Guardian" }, { "branches": [ { "category": "product_version_range", "name": "vers:gem/<22.6.3", "product": { "name": "Nozomi Networks CMC <22.6.3", "product_id": "CSAFPID-0005" } }, { "category": "product_version_range", "name": "vers:gem/>=23.0.0|<23.1.0", "product": { "name": "Nozomi Networks CMC >=23.0.0|<23.1.0", "product_id": "CSAFPID-0006" } }, { "category": "product_version", "name": "22.6.3", "product": { "name": "Nozomi Networks CMC 22.6.3", "product_id": "CSAFPID-0007" } }, { "category": "product_version", "name": "23.1.0", "product": { "name": "Nozomi Networks CMC 23.1.0", "product_id": "CSAFPID-0008" } } ], "category": "product_name", "name": "CMC" } ], "category": "vendor", "name": "Nozomi Networks" } ] }, "vulnerabilities": [ { "acknowledgments": [ { "names": [ "Mostafa Soliman" ], "organization": "IBM X-Force Red", "summary": "finding this issue during a VAPT testing session commissioned by one of our customers" } ], "cve": "CVE-2023-2567", "cwe": { "id": "CWE-89", "name": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')" }, "discovery_date": "2023-09-18T11:00:00.000Z", "ids": [ { "system_name": "Nozomi Networks Security Advisory ID", "text": "NN-2023:9-01" } ], "notes": [ { "category": "summary", "text": "A SQL Injection vulnerability has been found in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality.", "title": "Vulnerability summary" } ], "product_status": { "fixed": [ "CSAFPID-0003", "CSAFPID-0004", "CSAFPID-0007", "CSAFPID-0008" ], "known_affected": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0005", "CSAFPID-0006" ] }, "references": [ { "category": "external", "summary": "Mitre CVE entry", "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2567" }, { "category": "self", "summary": "Canonical URL", "url": "https://security.nozominetworks.com/csaf/2023/nn-2023_9-01.json" }, { "category": "self", "summary": "Human-readable advisory.", "url": "https://security.nozominetworks.com/NN-2023:9-01" } ], "remediations": [ { "category": "mitigation", "details": "Use internal firewall features to limit access to the web management interface.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0005", "CSAFPID-0006" ] }, { "category": "vendor_fix", "details": "Upgrade to v22.6.3, v23.1.0 or later.", "product_ids": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0005", "CSAFPID-0006" ] } ], "scores": [ { "cvss_v3": { "baseScore": 8.8, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1" }, "products": [ "CSAFPID-0001", "CSAFPID-0002", "CSAFPID-0005", "CSAFPID-0006" ] } ], "threats": [ { "category": "impact", "details": "Authenticated users may be able to execute arbitrary SQL statements on the DBMS used by the web application." } ], "title": "Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0" } ] }