This vulnerability involves a lack of limits on the size of input recorded into audit log entries in Nozomi Networks Guardian. Because the audit logging functionality does not impose size restrictions, an unauthenticated attacker can submit requests with excessively large payloads. These payloads are recorded into audit logs, which can exhaust available disk space and cause denial of service by making the system inoperable. The CVSS 4.0 base score is 8.7, reflecting high severity with network attack vector, no privileges required, and high impact on availability. No patch or official remediation guidance is currently available, and the affected versions are not explicitly stated.

An unauthenticated attacker can cause a denial-of-service condition by exhausting disk space through oversized audit log entries. This can render the affected system inoperable due to resource exhaustion. There is no indication of confidentiality or integrity impact, only availability is affected.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider monitoring audit log sizes and implementing external controls to limit input size or rate if possible. Avoid exposure of the vulnerable service to untrusted networks where feasible.