CVE-2024-13090
BaseFortify
Publication date: 2025-06-10
Last updated on: 2025-06-12
Assigner: Nozomi Networks Inc.
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-250 | The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2024-13090 is a privilege escalation vulnerability in Nozomi Networks' Guardian and CMC products prior to version 24.6.0. It occurs because the sudo rules for a local service account are too permissive, potentially allowing that account to gain administrative privileges if an attacker can execute arbitrary commands as the service account. Although this vulnerability could allow elevated privileges, no active exploitation vector has been identified. [1]
How can this vulnerability impact me? :
This vulnerability can lead to an attacker gaining administrative access on the affected system if they can execute arbitrary commands as the local service account. This results in high risks to confidentiality, integrity, and availability of the system. However, exploitation requires local access with high attack complexity and low privileges, and no user interaction is needed. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves checking for overly permissive sudo rules configured for local service accounts. You can inspect the sudoers file or sudoers.d directory for such configurations. For example, use commands like 'sudo -l -U <service_account>' to list allowed commands for the service account, or 'grep -r <service_account> /etc/sudoers /etc/sudoers.d/'. [1]
What immediate steps should I take to mitigate this vulnerability?
The recommended immediate step is to upgrade affected Guardian and CMC products to version 24.6.0 or later. No other workarounds or mitigations are currently available. [1]