{"id":"CVE-2023-47091","aliases":["EUVD-2023-51245","GHSA-ch6f-2w93-3p64"],"status":"published","title":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4...","description":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.00531,"percentile":0.45215,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-120"],"published":"2023-12-25T00:00:00Z","modified":"2026-06-17T06:32:07Z","products":[{"vendor":"stormshield","product":"stormshield_network_security"}],"references":[{"url":"https://advisories.stormshield.eu","tags":["x_transferred","Vendor Advisory"]},{"url":"https://advisories.stormshield.eu/2023-024/","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-47091"},{"url":"https://advisories.stormshield.eu/2023-024"},{"url":"https://github.com/advisories/GHSA-ch6f-2w93-3p64"}],"sources":{"cve":[{"id":"CVE-2023-47091","description":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.","status":"published","published":"2023-12-25T00:00:00Z","modified":"2025-04-23T16:12:37.64Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:35:13.912858Z"}],"euvd":[{"id":"EUVD-2023-51245","description":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.","status":"published","published":"2023-12-25T00:00:00Z","modified":"2025-04-23T16:12:37Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T20:52:13.204099Z"}],"ghsa":[{"id":"GHSA-ch6f-2w93-3p64","title":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4...","description":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.","status":"published","published":"2023-12-25T09:30:20Z","modified":"2024-08-20T15:33:17Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:58:01.327673Z"}],"nvd":[{"id":"CVE-2023-47091","description":"An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before 4.7.2. An attacker can overflow the cookie threshold, making an IPsec connection impossible.","status":"published","published":"2023-12-25T07:15:09.537Z","modified":"2026-06-17T06:32:07.27Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:08:57.117371Z"}]}}