CVE-2023-23574

Summary

CVE-2023-23574 is a blind SQL Injection vulnerability affecting Nozomi Networks Guardian and CMC. This issue arises due to insufficient input validation in the alerts_count component, enabling authenticated attackers to execute arbitrary SQL queries on the underlying DBMS. Consequently, attackers can extract uncontrolled information from the database, posing a significant security risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.