CVE-2022-23989

The CVE-2022-23989 issue affects Stormshield Network Security (SNS) prior to specific fixed versions across 3.7.25, 3.11.13, 4.2.10, and 4.3.5. The vulnerability arises when a flood of connections to the SSLVPN service saturates the loopback interface, which can block almost all network traffic a...

Stormshield Network Security 安全漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from the French company Stormshield. Stormshield Stormshield Network Security suffers from a security vulnerability that stems from an issue with the SSLvpn service's handling of a large number of connection...

PT-2022-16392 · Stormshield · Stormshield Network Security

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security SNS versions 3.7.6 through 3.7.24 Stormshield Network Security SNS versions 3.8.x through 3.11.x before 3.11.13 Stormshield Network Security SNS versions 4.x before 4.2.10 Stormshield Network Security SNS versions...

CVE-2021-31814

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client...

CVE-2021-37613

Stormshield Network Security SNS 1.0.0 through 4.2.3 allows a Denial of Service...

CVE-2021-37613

Stormshield Network Security SNS 1.0.0 through 4.2.3 allows a Denial of Service...

CVE-2021-3398

Stormshield Network Security SNS 3.x has an Integer Overflow in the high-availability component...

CVE-2021-37613

Stormshield Network Security SNS 1.0.0 through 4.2.3 allows a Denial of Service...

CVE-2021-31814

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client...

CVE-2021-3398

Stormshield Network Security SNS 3.x has an Integer Overflow in the high-availability component...

Integer overflow

Stormshield Network Security SNS 3.x has an Integer Overflow in the high-availability component...

Denial of service

Stormshield Network Security SNS 1.0.0 through 4.2.3 allows a Denial of Service...

Information disclosure

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client...

CVE-2021-31814

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client...

CVE-2021-31814

Stormshield Network Security is affected: Stormshield 1.1.0 and 2.1.0–2.9.0 allow an attacker to block VPN client access and disclose sensitive information via the SN VPN SSL Client. The Red Hat and NVD entries confirm the same description across multiple sources; PT-2022-10052 notes no public fi...

CVE-2021-37613

Stormshield Network Security SNS 1.0.0 through 4.2.3 allows a Denial of Service...

CVE-2021-37613

Stormshield Network Security (SNS) versions 1.0.0–4.2.3 are affected by CVE-2021-37613, resulting in a Denial of Service. The issue is documented across multiple sources (NVD, Red Hat, PRION, CVE List, etc.) with CVSS v3.1 base score 6.5 (AV:A, AC:L, PR:N, UI:N, S:U, A:H) and CVSS v2 base score 2...

CVE-2021-3398

CVE-2021-3398: Stormshield Network Security (SNS) 3.x is affected by an integer overflow in the high-availability component. The combined set of connected documents confirms the vulnerable element is within SNS 3.x’s high-availability functionality, caused by an integer-overflow condition. Exploi...

CVE-2021-3398

Stormshield Network Security SNS 3.x has an Integer Overflow in the high-availability component...

PT-2022-10052 · Unknown · Stormshield

Name of the Vulnerable Software and Affected Versions: Stormshield versions 1.1.0 Stormshield versions 2.1.0 through 2.9.0 Description: An issue exists where an attacker can block a client from accessing the VPN and obtain sensitive information through the SN VPN SSL Client. Recommendations: For...