CVE-2024-13090: Nozomi Networks Cmc

High severity, CVSS 7.0. EPSS: 0.1% chance of exploitation in the next 30 days.

A privilege escalation vulnerability may enable a service account to elevate its privileges. The sudo rules configured for a local service account were excessively permissive, potentially allowing administrative access if a malicious actor could execute arbitrary commands as that account. It is important to note that no such vector has been identified in this instance.

Affected products

• Nozomi Networks Cmc: before 24.6.0 (fixed in 24.6.0)
• Nozomi Networks Guardian: before 24.6.0 (fixed in 24.6.0)

Published 2025-06-10. Last modified 2026-06-17.