What’s Vulnerable › Vulnerabilities

CVE-2023-23903: DoS via SAML configuration in Guardian/CMC before 22.6.2

• Severity: medium (CVSS 4.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-09 · updated 2026-06-17
• Weakness: CWE-1286

Description

An authenticated administrator can upload a SAML configuration file with the wrong format, with the application not checking the correct file format. Every subsequent application request will return an error. The whole application in rendered unusable until a console intervention.

Affected products

• Nozomi Networks CMC: before 22.6.2 — fixed in 22.6.2
• Nozomi Networks Guardian: before 22.6.2 — fixed in 22.6.2

How to fix

Upgrade to a fixed version: Nozomi Networks CMC 22.6.2; Nozomi Networks Guardian 22.6.2. Check the vendor advisory for mitigations.

References

• https://security.nozominetworks.com/NN-2023:7-01
• https://security.nozominetworks.com/NN-2023:7-01

Get alerted when CVE-2023-23903 or the next vulnerability affects your stack