CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-45091
https://notcve.org/view.php?id=CVE-2021-45091
21 Dec 2021 — Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. Stormshield Endpoint Security desde la versión 2.1.0 a 2.1.1, presenta un Control de Acceso Incorrecto • https://advisories.stormshield.eu/2021-072 •
CVSS: 7.5EPSS: 4%CPEs: 60EXPL: 2CVE-2002-20001
https://notcve.org/view.php?id=CVE-2002-20001
11 Nov 2021 — The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-exponentiation calculations, aka a D(HE)at or D(HE)ater attack. The client needs very little CPU resources and network bandwidth. The attack may be more disruptive in cases where a client can require a server to select its largest supported key size. The basic attack scenario is that the client must claim that it c... • https://github.com/c0r0n3r/dheater • CWE-400: Uncontrolled Resource Consumption •
CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31221
https://notcve.org/view.php?id=CVE-2021-31221
13 Jul 2021 — SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed. SES Evolution versiones anteriores a 2.1.0, permite eliminar algunas partes de una política de seguridad al aprovechar el acceso a un ordenador que tenga instalada la consola de administración • https://advisories.stormshield.eu •
CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31222
https://notcve.org/view.php?id=CVE-2021-31222
13 Jul 2021 — SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. SES Evolution versiones anteriores a 2.1.0, permite actualizar algunas partes de una política de seguridad al aprovechar el acceso a un ordenador que tenga instalada la consola de administración • https://advisories.stormshield.eu •
CVSS: 5.7EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31223
https://notcve.org/view.php?id=CVE-2021-31223
13 Jul 2021 — SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed. SES Evolution versiones anteriores a 2.1.0, permite leer algunas partes de una política de seguridad al aprovechar el acceso a un ordenador que tenga instalada la consola de administración • https://advisories.stormshield.eu •
CVSS: 5.2EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31220
https://notcve.org/view.php?id=CVE-2021-31220
13 Jul 2021 — SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. SES Evolution versiones anteriores a 2.1.0, permite c al aprovechar el acceso de un usuario que tenga acceso de sólo lectura a las políticas de seguridad • https://advisories.stormshield.eu •
CVSS: 3.5EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31224
https://notcve.org/view.php?id=CVE-2021-31224
13 Jul 2021 — SES Evolution before 2.1.0 allows duplicating an existing security policy by leveraging access of a user having read-only access to security policies. SES Evolution versiones anteriores a 2.1.0, permite duplicar una política de seguridad existente al aprovechar el acceso de un usuario con acceso de sólo lectura a las políticas de seguridad • https://advisories.stormshield.eu •
CVSS: 6.7EPSS: 0%CPEs: 1EXPL: 0CVE-2021-35957
https://notcve.org/view.php?id=CVE-2021-35957
13 Jul 2021 — Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones. Stormshield Endpoint Security Evolution versiones 2.0.0 hasta 2.0.2, no logra la defensa prevista contra los administradores locales que pueden reemplazar las DLL de tiempo de ejecución de Visual C++ (en %WINDIR%\system32) por otras maliciosas • https://advisories.stormshield.eu • CWE-427: Uncontrolled Search Path Element •
CVSS: 7.3EPSS: 0%CPEs: 1EXPL: 0CVE-2021-31225
https://notcve.org/view.php?id=CVE-2021-31225
13 Jul 2021 — SES Evolution before 2.1.0 allows deleting some resources not currently in use by any security policy by leveraging access to a computer having the administration console installed. SES Evolution versiones anteriores a 2.1.0, permite borrar algunos recursos que no están en uso por ninguna política de seguridad al aprovechar el acceso a un ordenador que tenga instalada la consola de administración • https://advisories.stormshield.eu •
CVSS: 7.5EPSS: 0%CPEs: 6EXPL: 0CVE-2021-28127
https://notcve.org/view.php?id=CVE-2021-28127
01 Jul 2021 — An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur. Se ha detectado un problema en Stormshield SNS versiones hasta 4.2.1. Puede ocurrir un ataque de fuerza bruta • https://advisories.stormshield.eu • CWE-307: Improper Restriction of Excessive Authentication Attempts •