Medium severity · published Aug 28, 2023
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0
5.3
CVSS
0.3%
EPSS
No
On KEV
Description
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 21% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SV
Ssl Vpn Client · Stormshield
before 3.2.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-46783
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-46783
Vendor Advisory
https://advisories.stormshield.eu/
Vendor Advisory
https://advisories.stormshield.eu/2022-029/
More from Ssl Vpn Client
7.8
CVE-2021-27932
Stormshield Network Security (SNS) VPN SSL Client 2.1.0 through 2.8.0 has Insecure Permissions
7.8
CVE-2022-46782
An issue was discovered in Stormshield SSL VPN Client before 3.2.0