{"id":"CVE-2021-31617","aliases":["EUVD-2021-18506","GHSA-43x4-rqpq-prmp"],"status":"published","title":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0...","description":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.02089,"percentile":0.81876,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2022-01-31T15:16:46Z","modified":"2026-06-17T03:52:05Z","products":[{"vendor":"stormshield","product":"stormshield_network_security"}],"references":[{"url":"https://advisories.stormshield.eu/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://advisories.stormshield.eu/2021-020/","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-31617"},{"url":"https://advisories.stormshield.eu"},{"url":"https://advisories.stormshield.eu/2021-020"},{"url":"https://github.com/advisories/GHSA-43x4-rqpq-prmp"}],"sources":{"cve":[{"id":"CVE-2021-31617","description":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.","status":"published","published":"2022-01-31T15:16:46Z","modified":"2024-08-03T23:03:33.629Z","updated_at":"2026-11-02T14:33:05.665371Z"}],"euvd":[{"id":"EUVD-2021-18506","description":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.","status":"published","published":"2022-01-31T15:16:46Z","modified":"2024-08-03T23:03:33Z","updated_at":"2026-11-03T03:24:38.423371Z"}],"ghsa":[{"id":"GHSA-43x4-rqpq-prmp","title":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0...","description":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.","status":"published","published":"2022-02-08T00:00:47Z","modified":"2024-08-20T15:33:17Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:58:01.327673Z"}],"nvd":[{"id":"CVE-2021-31617","description":"In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.","status":"published","published":"2022-01-31T16:15:09.793Z","modified":"2026-06-17T03:52:05.323Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:07:04.178977Z"}]}}