CveMateVulnerability intelligence

Stormshield vulnerabilities

63 vulnerabilities

Known vulnerabilities in Stormshield products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 6 products.

Products

6

Stormshield Network Security38 vulnerabilities
Endpoint Security15 vulnerabilities
Stormshield Management Center8 vulnerabilities
Network Security3 vulnerabilities
Ssl Vpn Client3 vulnerabilities
Sslvpn1 vulnerabilities

CVE-2018-20850stormshieldstormshield_network_security7y ago04-07-2019 13:16

Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server.CVE-2021-31224stormshieldendpoint_security5y ago13-07-2021 13:10

SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies.CVE-2021-31617stormshieldstormshield_network_security4y ago31-01-2022 15:16

In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.CVE-2021-31220stormshieldendpoint_security5y ago13-07-2021 13:15

SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies.CVE-2021-31223stormshieldendpoint_security5y ago13-07-2021 13:19

SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed.CVE-2021-31221stormshieldendpoint_security5y ago13-07-2021 13:31

SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed.CVE-2021-31225stormshieldendpoint_security5y ago13-07-2021 12:57

SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed.CVE-2021-31222stormshieldendpoint_security5y ago13-07-2021 13:27

SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed.CVE-2021-31814stormshieldstormshield_network_security4y ago10-02-2022 16:28

In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client.CVE-2021-37613stormshieldstormshield_network_security4y ago10-02-2022 16:19

Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service.CVE-2021-27932stormshieldssl_vpn_client3y ago25-08-2023 00:00

Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions.CVE-2021-27506clamavclamav+25y ago19-03-2021 14:28

The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1.CVE-2021-45090stormshieldendpoint_security4y ago21-12-2021 15:17

Stormshield Endpoint Security before 2.1.2 allows remote code execution.CVE-2021-45091stormshieldendpoint_security4y ago21-12-2021 15:10

Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control.CVE-2021-45089stormshieldendpoint_security4y ago21-12-2021 15:15

Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control.CVE-2021-45885stormshieldnetwork_security4y ago29-12-2021 16:02

An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password.CVE-2021-28096stormshieldstormshield_network_security4y ago27-01-2022 14:00

An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.CVE-2021-28127stormshieldstormshield_network_security5y ago01-07-2021 14:01

An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.CVE-2021-28962stormshieldstormshield_network_security4y ago31-01-2022 13:50

Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.CVE-2021-28665stormshieldnetwork_security+15y ago06-05-2021 19:26

Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service.