CVE-2023-5253

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A missing authentication check in the WebSocket channel used for the Check Point IoT integration in Nozomi Networks Guardian and CMC, may allow an unauthenticated attacker to obtain assets data without authentication.

Malicious unauthenticated users with knowledge on the underlying system may be able to extract limited asset information.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
Jan 15, 2024
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-525307.8In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211_key_liCVE-2023-525317.8In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: Fix a memory corruption issue A few lines above, sCVE-2023-525325.5In the Linux kernel, the following vulnerability has been resolved: net: mana: Fix TX CQE error handling For an unknown TX CQE error type CVE-2023-525335.3In modem-ps-nas-ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote information disclosuCVE-2023-525345.9In ngmm, there is a possible undefined behavior due to incorrect error handling. This could lead to remote denial of service with no additioCVE-2023-525354.4In vsp driver, there is a possible missing verification incorrect input. This could lead to local denial of service with no additional execuCVE-2023-525364.4In faceid service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with SysCVE-2023-525377.5Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will afCVE-2023-525389.1Vulnerability of package name verification being bypassed in the HwIms module. Impact: Successful exploitation of this vulnerability will afCVE-2023-525397.5Permission verification vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confiCVE-2023-52545.3The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcld_wb_chaCVE-2023-525407.5Vulnerability of improper authentication in the Iaware module. Impact: Successful exploitation of this vulnerability will affect availabilit