Executive Summary

CVE-2025-40893 is a Stored HTML Injection vulnerability in the Asset List functionality of Nozomi Networks Guardian and CMC products before version 25.5.0. It occurs because network traffic data is not properly validated, allowing an unauthenticated attacker to send specially crafted packets that inject malicious HTML tags into asset attributes. When users view these assets, the injected HTML is rendered in their browsers, which can lead to phishing attacks and open redirect scenarios. However, full cross-site scripting exploitation and direct information disclosure are prevented by existing input validation and Content Security Policy. [1]

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can impact you by enabling attackers to inject malicious HTML into asset attributes that are viewed in the Asset List or similar interfaces. This can lead to phishing attacks where users might be tricked into revealing sensitive information, or open redirect attacks that redirect users to malicious sites. Although full cross-site scripting and direct data leaks are mitigated, the risk of social engineering and redirection attacks remains. [1]

Useful 0 Not Useful 0

Mitigation Strategies

The immediate step to mitigate this vulnerability is to upgrade the affected Guardian and CMC products to version 25.5.0 or later, as this version resolves the issue. No other workarounds or mitigations are provided. [1]

Useful 0 Not Useful 0