DoS on IDS parsing of malformed asset fields in Guardian/CMC >= 22.6.0 before 22.6.3 and 23.1.0

CVE-2023-32649

What is CVE-2023-32649?

A critical security flaw has been discovered in Nozomi Networks Guardian and CMC that allows an unauthenticated attacker to exploit improper input validation within the Asset Intelligence functionality of the Intrusion Detection System (IDS). By sending specially crafted malformed network packets, an attacker could crash the IDS module. This exploitation leads to a temporary disruption in network traffic analysis, as the system may remain non-functional until the module is restarted automatically. Organizations utilizing these products should seek to implement necessary updates and mitigations to safeguard against potential attacks.

References