VYPR
← All advisories
High severity7.2NVD Advisory· Published Feb 22, 2021· Updated Jun 17, 2026

CVE-2021-26724

CVE-2021-26724

Description

OS Command Injection vulnerability when changing date settings or hostname using web GUI of Nozomi Networks Guardian and CMC allows authenticated administrators to perform remote code execution. This issue affects: Nozomi Networks Guardian 20.0.7.3 version 20.0.7.3 and prior versions. Nozomi Networks CMC 20.0.7.3 version 20.0.7.3 and prior versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Nozominetworks/Central Management Control
    cpe:2.3:a:nozominetworks:central_management_control:*:*:*:*:*:*:*:*
    Range: >=19.0.0,<=19.0.12
  • Nozominetworks/Guardian3 versions
    cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*range: >=19.0.0,<19.0.12
    • (no CPE)range: <=20.0.7.3
    • (no CPE)range: 20.0.7.3 and prior versions
  • Nozominetworks/Cmcllm-fuzzy2 versions
    <=20.0.7.3+ 1 more
    • (no CPE)range: <=20.0.7.3
    • (no CPE)range: 20.0.7.3 and prior versions

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.