CVE-2024-0218 HIGH

CVE-2024-0218: DoS on IDS parsing of malformed Radius packets in Guardian before 23.4.1

Vendor Nozomi Networks
Product Guardian
Weakness CWE-1286
Published April 10, 2024
Last update September 20, 2024
View on NVD All CVEs

CVSS base score

7.5/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

What the vulnerability does

01Description

A Denial of Service (Dos) vulnerability in Nozomi Networks Guardian, caused by improper input validation in certain fields used in the Radius parsing functionality of our IDS, allows an unauthenticated attacker sending specially crafted malformed network packets to cause the IDS module to stop updating nodes, links, and assets. Network traffic may not be analyzed until the IDS module is restarted.

Key dates

02Disclosure timeline

April 10, 2024 CVE published
September 20, 2024 Record updated