Advisories · Technology
Nozomi Networks Arc.
Every CVE that names Nozomi Networks Arc among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 5.3 Medium
Disabled and non-configurable certificate/host key validation in Smart Polling in Guardian/CMC before 26.3.0 and Arc before v2.7.0
- Nozomi Networks Guardian
- Nozomi Networks CMC
- CWE-671
- CVSS 6.8 Medium
Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0
- Nozomi Networks Arc
- Path traversal
- CVSS 4.8 Medium
Npcap driver installed without administrator-only access restriction on Windows in Arc before v2.7.0
- Nozomi Networks Arc
- CWE-1188
- CVSS 6.3 Medium
Lack of TLS certificate validation when connecting Arc to a Guardian or CMC, in Arc before v2.2.0
- Nozomi Networks Arc
- Weak cryptography or TLS
- CVSS 8.9 High
Path traversal via 'zip slip' in Arc before v1.6.0
- Nozomi Networks Arc
- Path traversal
- CVSS 5.2 Medium
Sensitive data exfiltration via unsafe permissions on Windows systems in Arc before v1.6.0
- Nozomi Networks Arc
- Information disclosure
- CVSS 7.3 High
Unsafe temporary data privileges on Unix systems in Arc before v1.6.0
- Nozomi Networks Arc
- Broken access control
- CVSS 7.3 High
Missing authentication for local web interface in Arc before v1.6.0
- Nozomi Networks Arc
- Authentication bypass