This vulnerability in Nozomi Networks Guardian involves incorrect privilege assignment due to Arc sensors receiving CLI permissions during synchronization. An authenticated user with limited privileges can exploit this to execute administrative CLI commands through the sync process, which may modify device configurations or affect device availability. The CVSS 4.0 base score is 7.2, indicating a high severity with network attack vector, low attack complexity, no user interaction, and high impact on integrity and availability. No vendor advisory or patch information is currently available.

An attacker with limited authenticated privileges can escalate their effective permissions by pushing administrative CLI commands through the synchronization mechanism. This can lead to unauthorized changes in device configuration and potentially disrupt device availability, impacting the security and stability of the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to authenticated users with limited privileges and monitor synchronization activities closely to detect any unauthorized configuration changes.