This vulnerability (CWE-863) in Nozomi Networks Guardian arises from insufficient validation of user privileges in the Smart Polling configuration functionality. It allows an authenticated user with limited privileges to remotely bypass access controls on the web management interface and alter the Smart Polling discovery configuration. This unauthorized modification can interfere with the visibility of assets within the monitored network, potentially impacting network monitoring effectiveness. The CVSS 4.0 vector indicates network attack vector, low attack complexity, no user interaction, and limited privileges required.

An attacker with limited authenticated access can bypass access controls to modify Smart Polling discovery settings, potentially disrupting the visibility of assets in the monitored network. This may reduce the effectiveness of network monitoring and asset management but does not directly indicate further privilege escalation or data compromise.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or workaround has been published by Nozomi Networks at this time.