{
  "document": {
    "aggregate_severity": {
      "text": "HIGH"
    },
    "category": "csaf_vex",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE"
      }
    },
    "lang": "en-US",
    "notes": [
      {
        "category": "other",
        "text": "Medium",
        "title": "Risk Level for Nozomi customers"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "Nozomi Networks Product Security team can be reached at prodsec@nozominetworks.com",
      "name": "Nozomi Networks Product Security",
      "namespace": "https://security.nozominetworks.com/psirt"
    },
    "title": "Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0",
    "tracking": {
      "aliases": [
        "CVE-2023-2567"
      ],
      "current_release_date": "2023-11-16T11:00:00.000Z",
      "id": "NN-2023:9-01",
      "initial_release_date": "2023-09-18T11:00:00.000Z",
      "revision_history": [
        {
          "date": "2023-09-18T11:00:00.000Z",
          "number": "1",
          "summary": "Initial revision"
        },
        {
          "date": "2023-11-13T11:00:00.000Z",
          "number": "2",
          "summary": "Migrated to CSAF VEX format"
        },
        {
          "date": "2023-11-16T11:00:00.000Z",
          "number": "3",
          "summary": "CSAF vers improvements"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:gem/\u003c22.6.3",
                "product": {
                  "name": "Nozomi Networks Guardian \u003c22.6.3",
                  "product_id": "CSAFPID-0001"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:gem/\u003e=23.0.0|\u003c23.1.0",
                "product": {
                  "name": "Nozomi Networks Guardian \u003e=23.0.0|\u003c23.1.0",
                  "product_id": "CSAFPID-0002"
                }
              },
              {
                "category": "product_version",
                "name": "22.6.3",
                "product": {
                  "name": "Nozomi Networks Guardian 22.6.3",
                  "product_id": "CSAFPID-0003"
                }
              },
              {
                "category": "product_version",
                "name": "23.1.0",
                "product": {
                  "name": "Nozomi Networks Guardian 23.1.0",
                  "product_id": "CSAFPID-0004"
                }
              }
            ],
            "category": "product_name",
            "name": "Guardian"
          },
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "vers:gem/\u003c22.6.3",
                "product": {
                  "name": "Nozomi Networks CMC \u003c22.6.3",
                  "product_id": "CSAFPID-0005"
                }
              },
              {
                "category": "product_version_range",
                "name": "vers:gem/\u003e=23.0.0|\u003c23.1.0",
                "product": {
                  "name": "Nozomi Networks CMC \u003e=23.0.0|\u003c23.1.0",
                  "product_id": "CSAFPID-0006"
                }
              },
              {
                "category": "product_version",
                "name": "22.6.3",
                "product": {
                  "name": "Nozomi Networks CMC 22.6.3",
                  "product_id": "CSAFPID-0007"
                }
              },
              {
                "category": "product_version",
                "name": "23.1.0",
                "product": {
                  "name": "Nozomi Networks CMC 23.1.0",
                  "product_id": "CSAFPID-0008"
                }
              }
            ],
            "category": "product_name",
            "name": "CMC"
          }
        ],
        "category": "vendor",
        "name": "Nozomi Networks"
      }
    ]
  },
  "vulnerabilities": [
    {
      "acknowledgments": [
        {
          "names": [
            "Mostafa Soliman"
          ],
          "organization": "IBM X-Force Red",
          "summary": "finding this issue during a VAPT testing session commissioned by one of our customers"
        }
      ],
      "cve": "CVE-2023-2567",
      "cwe": {
        "id": "CWE-89",
        "name": "Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
      },
      "discovery_date": "2023-09-18T11:00:00.000Z",
      "ids": [
        {
          "system_name": "Nozomi Networks Security Advisory ID",
          "text": "NN-2023:9-01"
        }
      ],
      "notes": [
        {
          "category": "summary",
          "text": "A SQL Injection vulnerability in Nozomi Networks Guardian and CMC, due to improper input validation in certain parameters used in the Query functionality, allows an authenticated attacker to execute arbitrary SQL queries on the DBMS used by the web application.",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "CSAFPID-0003",
          "CSAFPID-0004",
          "CSAFPID-0007",
          "CSAFPID-0008"
        ],
        "known_affected": [
          "CSAFPID-0001",
          "CSAFPID-0002",
          "CSAFPID-0005",
          "CSAFPID-0006"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "Mitre CVE entry",
          "url": "https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2567"
        },
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://security.nozominetworks.com/csaf/2023/nn-2023_9-01.json"
        },
        {
          "category": "self",
          "summary": "Human-readable advisory.",
          "url": "https://security.nozominetworks.com/NN-2023:9-01"
        }
      ],
      "remediations": [
        {
          "category": "mitigation",
          "details": "Use internal firewall features to limit access to the web management interface.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ]
        },
        {
          "category": "vendor_fix",
          "details": "Upgrade to v22.6.3, v23.1.0 or later.",
          "product_ids": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.6,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L",
            "version": "3.1"
          },
          "products": [
            "CSAFPID-0001",
            "CSAFPID-0002",
            "CSAFPID-0005",
            "CSAFPID-0006"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Authenticated users can extract arbitrary information from the DBMS in an uncontrolled way."
        }
      ],
      "title": "Authenticated SQL Injection on Query functionality in Guardian/CMC before 22.6.3 and 23.1.0"
    }
  ]
}