This vulnerability arises from the lack of size limits on input data recorded into audit logs in Nozomi Networks Guardian. Because the audit logging functionality does not throttle or limit resource allocation, an attacker can cause a denial-of-service by submitting large inputs that fill disk space. The vulnerability requires no authentication and has a CVSS 4.0 base score of 8.7, indicating high impact. No official remediation or patch information is currently available, and the product is not a cloud service.

An unauthenticated attacker can cause a denial-of-service condition by exhausting disk space through unbounded audit log entries, potentially rendering the affected system inoperable.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor audit log sizes and consider implementing external controls to limit input sizes if possible.