CVE-2021-45089

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control...

Improper access control

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

Improper access control

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control...

Remote code execution

Stormshield Endpoint Security before 2.1.2 allows remote code execution...

CVE-2021-45090

CVE-2021-45090 affects Stormshield Endpoint Security; versions before 2.1.2 are vulnerable to remote code execution. The root cause is improper handling of externally entered data when constructing code segments. Impact is remote code execution with high confidentiality, integrity, and availabili...

CVE-2021-45090

Stormshield Endpoint Security before 2.1.2 allows remote code execution...

CVE-2021-45089

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control...

CVE-2021-45089

CVE-2021-45089 affects Stormshield Endpoint Security 2.x (pre-2.1.2) due to Incorrect Access Control. Root cause: improper access control in the product, enabling potential impact on availability. CVSSv3.1 base metrics indicate Avatar: Adjacent, Privileges Required: Low, User Interaction Required...

CVE-2021-45091

The CVE-2021-45091 entry concerns Stormshield Endpoint Security, versions 2.1.0 through 2.1.1, with an incorrect access control vulnerability. Available connected documents confirm the affected product and version range but do not disclose technical details about the root cause, specific componen...

CVE-2021-45091

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield that stems from incorrect access control in Stormshield Endpoint Security from 2.1.0 to 2.1.1...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security is a product line of enhanced workstation and server security from the French company Stormshield. A security vulnerability exists in Stormshield Endpoint Security that stems from incorrect access controls configured in Stormshield's previous x...

Stormshield Endpoint Security 安全漏洞

Stormshield Endpoint Security, the product line of the French company Stormshield for enhanced workstation and server security, has a remote code execution vulnerability in versions prior to 2.1.2, which stems from the process of constructing code segments from externally entered data. network...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. A security vulnerability exists in Stormshield Network Security Netasq that originates from an overload that can be triggered by an attacker through a proxy to trigger a...

CVE-2021-35957

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

CVE-2021-35957

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

Buffer overflow

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

CVE-2021-35957

Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs in %WINDIR%\system32 with malicious ones...

CVE-2021-35957

CVE-2021-35957 affects Stormshield Endpoint Security Evolution 2.0.0–2.0.2. The issue is a local-privilege concern where an attacker with local access can replace Visual C++ runtime DLLs in %WINDIR%\system32 with malicious versions, undermining the intended defense. Root cause: insufficient prote...

Stormshield SES Evolution 授权问题漏洞

Stormshield SES Evolution is a security solution from the French company Stormshield. An authorization issue vulnerability exists in SES Evolution that originates from a vulnerability that allows the deletion of some security policies when accessing a computer on which the management console is...