Code injection

2022-01-2714:15:00

PRIOn knowledge base

www.prio-n.com

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.5%

JSON

An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.

CPENameOperatorVersion
stormshield_network_securityge4.0.1
stormshield_network_securitylt4.2.3
stormshield_network_securityge3.7.6
stormshield_network_securityle3.7.20
stormshield_network_securityge3.8.0
stormshield_network_securityle3.11.8
stormshield_network_securityge2.0.0
stormshield_network_securityle2.7.8

Name	Operator	Version
stormshield_network_security	ge	4.0.1
stormshield_network_security	lt	4.2.3
stormshield_network_security	ge	3.7.6
stormshield_network_security	le	3.7.20
stormshield_network_security	ge	3.8.0
stormshield_network_security	le	3.11.8
stormshield_network_security	ge	2.0.0
stormshield_network_security	le	2.7.8

References

advisories.stormshield.eu/2021-005/