VYPR
← All advisories
High severity7.2NVD Advisory· Published Mar 24, 2022· Updated Jun 17, 2026

CVE-2022-0550

CVE-2022-0550

Description

Improper Input Validation vulnerability in custom report logo upload in Nozomi Networks Guardian, and CMC allows an authenticated attacker with admin or report manager roles to execute unattended commands on the appliance using web server user privileges. This issue affects: Nozomi Networks Guardian versions prior to 22.0.0. Nozomi Networks CMC versions prior to 22.0.0.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Nozominetworks/Cmc3 versions
    cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:nozominetworks:cmc:*:*:*:*:*:*:*:*range: <22.0.0
    • (no CPE)range: <22.0.0
    • (no CPE)range: unspecified
  • Nozominetworks/Guardian3 versions
    cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:nozominetworks:guardian:*:*:*:*:*:*:*:*range: <22.0.0
    • (no CPE)range: <22.0.0
    • (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.