What’s Vulnerable › Vulnerabilities

CVE-2020-7049

• Severity: high (CVSS 7.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-06-30 · updated 2026-06-17
• Weakness: CWE-1236

Description

Nozomi Networks OS before 19.0.4 allows /#/network?tab=network_node_list.html CSV Injection.

Affected products

• Nozomi Networks Guardian: before 19.0.4 — fixed in 19.0.4

How to fix

Upgrade to a fixed version: Nozomi Networks Guardian 19.0.4. Check the vendor advisory for mitigations.

References

• https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-csv-injection.html?nc=1
• https://www2.deloitte.com/de/de/pages/risk/articles/nozomi-csv-injection.html?nc=1

Get alerted when CVE-2020-7049 or the next vulnerability affects your stack