CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2021-31814
https://notcve.org/view.php?id=CVE-2021-31814
10 Feb 2022 — In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client. En Stormshield versiones 1.1.0, y versiones 2.1.0 hasta 2.9.0, un atacante puede bloquear el acceso de un cliente a la VPN y puede obtener información confidencial mediante el cliente SN VPN SSL • https://advisories.stormshield.eu • CWE-306: Missing Authentication for Critical Function •
CVSS: 6.5EPSS: 0%CPEs: 6EXPL: 0CVE-2021-37613
https://notcve.org/view.php?id=CVE-2021-37613
10 Feb 2022 — Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. Stormshield Network Security (SNS) versiones 1.0.0 hasta 4.2.3, permite una Denegación de Servicio • https://advisories.stormshield.eu •
CVSS: 5.8EPSS: 0%CPEs: 2EXPL: 0CVE-2021-3398
https://notcve.org/view.php?id=CVE-2021-3398
10 Feb 2022 — Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. Stormshield Network Security (SNS) 3.x, presenta un Desbordamiento de Enteros en el componente high-availability • https://advisories.stormshield.eu/2021-001 • CWE-190: Integer Overflow or Wraparound •
CVSS: 9.8EPSS: 3%CPEs: 4EXPL: 0CVE-2021-31617
https://notcve.org/view.php?id=CVE-2021-31617
31 Jan 2022 — In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution. En ASQ en Stormshield Network Security (SNS) versiones 1.0.0 hasta 2.7.8, 2.8.0 hasta 2.16.0, 3.0.0 hasta 3.7.20, 3.8.0 hasta 3.11.8, y 4.0.1 hasta 4.2.2, un manejo inapropiado de la memoria puede conllevar a una ejecución de código remota • https://advisories.stormshield.eu • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.2EPSS: 0%CPEs: 4EXPL: 0CVE-2021-28962
https://notcve.org/view.php?id=CVE-2021-28962
31 Jan 2022 — Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands. Stormshield Network Security (SNS) versiones anteriores a 4.2.2, permite que un administrador de sólo lectura obtenga privilegios por medio de comandos CLI • https://advisories.stormshield.eu •
CVSS: 5.3EPSS: 0%CPEs: 4EXPL: 0CVE-2021-28096
https://notcve.org/view.php?id=CVE-2021-28096
27 Jan 2022 — An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections. Se ha detectado un problema en Stormshield SNS versiones anteriores a 4.2.3 (cuando es usado el proxy). Un atacante puede saturar la tabla de conexiones del proxy. • https://advisories.stormshield.eu/2021-005 • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 5.5EPSS: 0%CPEs: 3EXPL: 0CVE-2022-22703
https://notcve.org/view.php?id=CVE-2022-22703
17 Jan 2022 — In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer. En Stormshield SSO Agent 2.x versiones anteriores a 2.1.1 y versiones 3.x anteriores a 3.0.2, la contraseña de usuario en texto sin cifrar y el PSK están contenidos en el archivo de registro del instalador .exe • https://advisories.stormshield.eu/2022-001 • CWE-532: Insertion of Sensitive Information into Log File •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-45885
https://notcve.org/view.php?id=CVE-2021-45885
29 Dec 2021 — An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8). Under a specific update-migration scenario, the first SSH password change does not properly clear the old password. Se ha detectado un problema en Stormshield Network Security (SNS) versiones 4.2.2 a 4.2.7 (corregido en versión 4.2.8). En un escenario específico de actualización-migración, el primer cambio de contraseña SSH no borra correctamente la contraseña antigua • https://advisories.stormshield.eu • CWE-613: Insufficient Session Expiration •
CVSS: 10.0EPSS: 3%CPEs: 1EXPL: 0CVE-2021-45090
https://notcve.org/view.php?id=CVE-2021-45090
21 Dec 2021 — Stormshield Endpoint Security before 2.1.2 allows remote code execution. Stormshield Endpoint Security versiones anteriores a 2.1.2, permite una ejecución de código remota • https://advisories.stormshield.eu/2021-070 •
CVSS: 5.2EPSS: 0%CPEs: 1EXPL: 0CVE-2021-45089
https://notcve.org/view.php?id=CVE-2021-45089
21 Dec 2021 — Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. Stormshield Endpoint Security versiones 2.x anteriores a 2.1.2 , presenta un Control de Acceso Incorrecto • https://advisories.stormshield.eu/2021-071 •