Lucene search

[email protected]CVE-2020-8430

HistoryApr 13, 2020 - 4:15 p.m.

CVE-2020-8430

2020-04-1316:15:13

CWE-601

[email protected]

web.nvd.nist.gov

cve-2020-8430

stormshield

network security 310

vulnerability

open redirect

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string.

Affected configurations

NVD

Node

stormshieldstormshield_network_securityRange3.0.0–3.7.10

stormshieldstormshield_network_securityRange3.8.0–3.10.0

stormshieldstormshield_network_securityRange4.0.0–4.0.1

CPENameOperatorVersion
stormshield:stormshield_network_securitystormshield stormshield network securityle3.7.10
stormshield:stormshield_network_securitystormshield stormshield network securityle3.10.0
stormshield:stormshield_network_securitystormshield stormshield network securityle4.0.1

CPE	Name	Operator	Version
stormshield:stormshield_network_security	stormshield stormshield network security	le	3.7.10
stormshield:stormshield_network_security	stormshield stormshield network security	le	3.10.0
stormshield:stormshield_network_security	stormshield stormshield network security	le	4.0.1

References

advisories.stormshield.eu/2020-001/

www.digitemis.com/2020/02/24/digitemis-decouvre-une-vulnerabilite-au-sein-dun-produit-stormshield-cve-2020-8430/

www.digitemis.com/category/blog/actualite/

www.stormshield.com/products/sn310/

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

6.3 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.2%

JSON

Related for CVE-2020-8430

prion1 cvelist1 nvd1