CVE-2026-33390
HIGH SEVERITYCVSS Score & Metrics
Base Score
8.1 / 10
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Vulnerability Description
An Incorrect Privilege Assignment vulnerability was discovered in the synchronization functionality due to Arc sensors receiving CLI permissions. An authenticated user with limited privileges can push administrative CLI commands through the sync, altering the device configuration, and/or affecting its availability.
Vulnerability Details
Published Date
Last Modified
CWE ID
CWE-266
Source
NVD
Vendor
Nozomi Networks
Product
Guardian, CMC
Discussion (0)
Add Comment
No comments yet. Be the first!