Stormshield Network Security vulnerabilities

• stormshield network security An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication... CVE-2025-48707 7.5 HighSeptember 25, 2025
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.25, 4.4.0 through... CVE-2024-37386 4.2 MediumJuly 15, 2024
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x... CVE-2023-28616 7.5 HighDecember 26, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4... CVE-2023-47091 7.5 HighDecember 25, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39,... CVE-2023-41165 4.8 MediumDecember 25, 2023
• stormshield network security In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24... CVE-2023-34198 7.3 HighDecember 25, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through... CVE-2023-47093 6.5 MediumDecember 20, 2023
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0... CVE-2023-41166 5.3 MediumDecember 20, 2023
• stormshield network security ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a... CVE-2023-26095 7.5 HighAugust 28, 2023
• stormshield network security An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login... CVE-2020-11711 4.8 MediumAugust 25, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud +1 more +3 more On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A... CVE-2023-20052 Public exploitFix available 5.3 MediumFebruary 16, 2023
• clamav, cisco secure endpoint, secure endpoint private cloud administration portal +4 more +6 more CVE-2023-20032 affecting package clamav for versions less than 0.105.2-1 CVE-2023-20032 Fix available EPSS 30.1% 9.8 CriticalFebruary 16, 2023
• openssl, siemens bfcclient, ruggedcom ape1808 +9 more +11 more X.400 address type confusion in X.509 GeneralName CVE-2023-0286 Fix available EPSS 69.3% 7.4 HighFebruary 7, 2023
• openssl, siemens scalance w1750d (jp), scalance w1750d (row) +6 more +8 more Double free after calling PEM_read_bio_ex CVE-2022-4450 Fix available EPSS 28.6% 7.5 HighFebruary 7, 2023
• openssl, siemens scalance w1750d (jp), scalance w1750d (row) +8 more +10 more Timing Oracle in RSA Decryption CVE-2022-4304 Public exploitFix available EPSS 23.5% 5.9 MediumFebruary 7, 2023
• strongswan, canonical ubuntu linux, debian linux +2 more +4 more strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation... CVE-2022-40617 Fix available 7.5 HighOctober 3, 2022
• stormshield network security Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal... CVE-2022-27812 7.5 HighAugust 24, 2022
• zlib, apple ipados, iphone os +29 more +31 more zlib through 1.2.12 has a heap-based buffer over-read or buffer overflow in inflate in inflate.c... CVE-2022-37434 Public exploitFix available EPSS 19.2% 9.8 CriticalAugust 5, 2022
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event... CVE-2022-30279 7.5 HighMay 12, 2022
• stormshield network security In Stormshield Network Security (SNS) 3.7.6 through 3.7.24, 3.11.1 through 3.11.12, 4.2.1 through... CVE-2022-23989 7.5 HighMarch 15, 2022
• stormshield network security In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the... CVE-2021-31814 6.1 MediumFebruary 10, 2022
• stormshield network security Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. CVE-2021-37613 6.5 MediumFebruary 10, 2022
• stormshield network security Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. CVE-2021-3398 5.8 MediumFebruary 10, 2022
• stormshield network security In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0... CVE-2021-31617 9.8 CriticalJanuary 31, 2022
• stormshield network security Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain... CVE-2021-28962 7.2 HighJanuary 31, 2022
• stormshield network security An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can... CVE-2021-28096 5.3 MediumJanuary 27, 2022
• stormshield network security In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and... CVE-2022-22703 5.5 MediumJanuary 17, 2022
• stormshield network security An issue was discovered in Stormshield Network Security (SNS) 4.2.2 through 4.2.7 (fixed in 4.2.8... CVE-2021-45885 7.5 HighDecember 29, 2021
• balasys dheater, f5 big-ip access policy manager, big-ip advanced firewall manager +27 more +29 more The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send... CVE-2002-20001 Public exploitFix available EPSS 24.6% 7.5 HighNovember 11, 2021
• stormshield network security An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur. CVE-2021-28127 7.5 HighJuly 1, 2021
• stormshield network security Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in... CVE-2021-28665 7.5 HighMay 6, 2021
• clamav, netasq project netasq, stormshield network security +2 more In Stormshield Network Security (SNS) 1.0 through 4.2.0, the parsing of some malformed files can... CVE-2021-27506 Fix available 5.5 MediumMarch 19, 2021
• stormshield network security A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection... CVE-2021-3384 5.3 MediumMarch 2, 2021
• mpd project mpd, stormshield network security +1 more The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically... CVE-2020-7466 7.5 HighOctober 6, 2020
• mpd project mpd, stormshield network security +1 more The L2TP implementation of MPD before 5.9 allows a remote attacker who can send specifically... CVE-2020-7465 9.8 CriticalOctober 6, 2020
• stormshield network security Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect... CVE-2020-8430 6.1 MediumApril 13, 2020
• stormshield network security Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the... CVE-2018-20850 8.2 HighJuly 4, 2019