CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2021-28127
https://notcve.org/view.php?id=CVE-2021-28127
An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur. Se ha detectado un problema en Stormshield SNS versiones hasta 4.2.1. Puede ocurrir un ataque de fuerza bruta • https://advisories.stormshield.eu https://advisories.stormshield.eu/2021-006 • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 6.1EPSS: 0%CPEs: 3EXPL: 0CVE-2020-8430
https://notcve.org/view.php?id=CVE-2020-8430
Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string. Los dispositivos Stormshield Network Security versión 310 3.7.10, presentan una vulnerabilidad de Redireccionamiento Abierto de auth/lang.html?rurl= en el portal cautivo. • https://advisories.stormshield.eu/2020-001 https://www.digitemis.com/2020/02/24/digitemis-decouvre-une-vulnerabilite-au-sein-dun-produit-stormshield-cve-2020-8430 https://www.digitemis.com/category/blog/actualite https://www.stormshield.com/products/sn310 • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •