Monthly
Man-in-the-middle exposure in Nozomi Networks Remote Collector arises because configuring an upstream Guardian or CMC through the n2os-tui interface generates a configuration that disables TLS certificate verification, with no option to re-enable it. Any attacker positioned on the network path between the Remote Collector and its Guardian/CMC can intercept the channel to steal the sync token, impersonate the server, inject spoofed asset or vulnerability data, or disrupt telemetry flow. There is no public exploit identified at time of analysis, and the issue is not on CISA KEV; the vendor (Nozomi) self-reported it.
Credential interception via man-in-the-middle attack is possible against Nozomi Networks Guardian sensors using the Smart Polling feature, which establishes encrypted connections to polled OT/ICS devices without validating the remote host's identity and provides no configuration option to enable such validation. An attacker with network positioning between the sensor and a target device can impersonate the device, capture the authentication credentials transmitted during polling sessions, and replay those credentials to authenticate directly against the device or other devices sharing the same credentials. This enables unauthorized access, data manipulation, and operational disruption of monitored industrial devices. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV.
Mjolnir is a moderation tool for Matrix. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.
Man-in-the-middle exposure in Nozomi Networks Remote Collector arises because configuring an upstream Guardian or CMC through the n2os-tui interface generates a configuration that disables TLS certificate verification, with no option to re-enable it. Any attacker positioned on the network path between the Remote Collector and its Guardian/CMC can intercept the channel to steal the sync token, impersonate the server, inject spoofed asset or vulnerability data, or disrupt telemetry flow. There is no public exploit identified at time of analysis, and the issue is not on CISA KEV; the vendor (Nozomi) self-reported it.
Credential interception via man-in-the-middle attack is possible against Nozomi Networks Guardian sensors using the Smart Polling feature, which establishes encrypted connections to polled OT/ICS devices without validating the remote host's identity and provides no configuration option to enable such validation. An attacker with network positioning between the sensor and a target device can impersonate the device, capture the authentication credentials transmitted during polling sessions, and replay those credentials to authenticate directly against the device or other devices sharing the same credentials. This enables unauthorized access, data manipulation, and operational disruption of monitored industrial devices. No public exploit has been identified at time of analysis and the vulnerability is not listed in CISA KEV.
Mjolnir is a moderation tool for Matrix. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.
A vulnerability in the SFTP server implementation for Cisco Nexus 3000 Series Switches and 9000 Series Switches in standalone NX-OS mode could allow an authenticated, remote attacker to download or. Rated medium severity (CVSS 5.4), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable, low attack complexity.