6 reportsPriority High
Vulnerabilities in Nozomi Guardian/CMC and Windows
New vulnerabilities have been identified in Nozomi Guardian/CMC and Windows systems, posing potential risks to organisations that use these technologies.
First report Latest
What is going on
- A template injection vulnerability was discovered in the Dashboards functionality of Nozomi Guardian/CMC due to improper validation of an input parameter.
- Concurrent execution using shared resources with improper synchronisation in Windows Installer allows an authorised attacker to elevate privileges locally.
- Improper certificate validation in Windows Hello could allow an authorised attacker to bypass a security feature locally.
- Improper access control in Windows Host Guardian Service allows an authorised attacker to elevate privileges locally.
- A vulnerability in Cisco BroadWorks could allow an unauthenticated, remote attacker to read sensitive configuration information.
Reports in this story
Newest first. Each one is a separate event with its own sources and evidence.
- Priority LowType Research & news
Fleet Strengthens European Footprint with ISO 27001 Certification and GDPR Validation
- Priority HighType VulnerabilityLead report
Cisco BroadWorks Improper Restriction of XML External Entity Reference Vulnerability
- Priority LowType Vulnerability
Access Control Flaw in Windows Host Guardian Service allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
Certificate Validation Flaw in Windows Hello allows an authorized attacker to bypass a security feature locally
- Priority LowType Vulnerability
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Installer allows an authorized attacker to elevate privileges locally
- Priority LowType Vulnerability
A template injection vulnerability was discovered in the Dashboards functionality due to improper validation of an input parameter