{"id":"CVE-2022-27812","aliases":["EUVD-2022-32307","GHSA-3qrj-m697-ww2v"],"status":"published","title":"Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal...","description":"Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.00806,"percentile":0.57287,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-400"],"published":"2022-08-24T00:00:00Z","modified":"2026-06-17T04:37:33Z","products":[{"vendor":"stormshield","product":"stormshield_network_security"}],"references":[{"url":"https://advisories.stormshield.eu/2022-009/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-27812"},{"url":"https://advisories.stormshield.eu/2022-009"},{"url":"https://github.com/advisories/GHSA-3qrj-m697-ww2v"}],"sources":{"cve":[{"id":"CVE-2022-27812","description":"Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2024-08-03T05:32:59.97Z","updated_at":"2026-11-02T14:34:34.250357Z"}],"euvd":[{"id":"EUVD-2022-32307","description":"Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.","status":"published","published":"2022-08-24T00:00:00Z","modified":"2024-08-03T05:32:59Z","updated_at":"2026-11-03T03:25:42.489853Z"}],"ghsa":[{"id":"GHSA-3qrj-m697-ww2v","title":"Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal...","description":"Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal to internal or external to internal interfaces will lead the firewall to overwork. It will consume 100% CPU, 100 RAM and won't be available and can crash.","status":"published","published":"2022-08-25T00:00:28Z","modified":"2024-08-20T15:33:16Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-400"],"updated_at":"2026-11-02T14:58:01.327673Z"}],"nvd":[{"id":"CVE-2022-27812","description":"Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.","status":"published","published":"2022-08-24T12:15:08.433Z","modified":"2026-06-17T04:37:33.587Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:07:25.883929Z"}]}}
