SN
Product
Stormshield Network Security
44
CVEs
0
On KEV
9.8
Max CVSS
6
New 30D
Severity mix
Critical 4High 21Medium 19Low 0
Watch
Add Stormshield Network Security to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-20850 | 8.2 | Jul 4 | Stormshield Network Security 2.0.0 through 2.13.0 and 3.0.0 through 3.7.1 has self-XSS in the command line interface of the SNS web server Affected: 2.0.0 through 2.13.0; 3.0.0 through 3.7.1 |
| CVE-2026-111090 | 7.8 | Oct 20 | Improper Signature Verification of Firmware Update Files Affected: 4.3.0 through 4.3.44; 4.8.0 through 4.8.19; 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
| CVE-2026-113469 | 7.5 | Oct 20 | Improper Signature Verification of Active Update Files Affected: 4.3.0 through 4.3.44; 4.8.0 through 4.8.19; 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
| CVE-2025-48707 | 7.5 | Sep 25 | An issue was discovered in Stormshield Network Security (SNS) before 5.0.1 Affected: before 5.0.1 |
| CVE-2023-28616 | 7.5 | Dec 26 | An issue was discovered in Stormshield Network Security (SNS) before 4.3.17, 4.4.x through 4.6.x before 4.6.4, and 4.7.x before 4.7.1 Affected: 2.7.0 before 4.3.17; 4.4.0 before 4.6.4; 4.7.0 |
| CVE-2023-47091 | 7.5 | Dec 25 | An issue was discovered in Stormshield Network Security (SNS) SNS 4.3.13 through 4.3.22 before 4.3.23, SNS 4.6.0 through 4.6.9 before 4.6.10, and SNS 4.7.0 through 4.7.1 before… Affected: 4.3.13 before 4.3.23; 4.6.0 before 4.6.10; 4.7.0 before 4.7.2 |
| CVE-2023-26095 | 7.5 | Aug 28 | ASQ in Stormshield Network Security (SNS) 4.3.15 before 4.3.16 and 4.6.x before 4.6.3 allows a crash when analysing a crafted SIP packet Affected: 4.6.0 before 4.6.3; 4.3.15 |
| CVE-2022-4450 | 7.5 | Feb 8 | Double free after calling PEM_read_bio_ex Affected: 4.0.0 before 4.3.16; 4.4.0 before 4.6.3 |
| CVE-2022-40617 | 7.5 | Oct 31 | strongSwan before 5.9.8 allows remote attackers to cause a denial of service in the revocation plugin by sending a crafted end-entity (and intermediate CA) certificate that… Affected: 3.11.1 before 3.11.20; 4.3.1 before 4.3.15; 4.5.1 before 4.6.0 |
| CVE-2022-27812 | 7.5 | Aug 24 | Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS Affected: 3.7.0 before 3.7.30; 3.11.0 before 3.11.18; 4.2.0 before 4.2.11; 4.3.0 before 4.3.7 |
| CVE-2022-30279 | 7.5 | May 12 | An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8 Affected: 4.3.3 before 4.3.8 |
| CVE-2022-23989 | 7.5 | Mar 15 | In Stormshield Network Security (SNS) before 3.7.25, 3.8.x through 3.11.x before 3.11.13, 4.x before 4.2.10, and 4.3.x before 4.3.5, a flood of connections to the SSLVPN service… Affected: 3.0.0 before 3.7.25; 3.8.0 before 3.11.13; 4.0.0 before 4.2.10; 4.3.0 before 4.3.5 |
| CVE-2002-20001 | 7.5 | Nov 11 | The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive… Affected: 2.7.0 before 4.3.16; 4.4.0 before 4.6.3 |
| CVE-2021-28127 | 7.5 | Jul 1 | An issue was discovered in Stormshield SNS through 4.2.1 Affected: 2.0.0 through 2.7.9; 2.8.0 through 2.16.0; 3.0.0 through 3.7.19; 3.8.0 through 3.11.7; 4.0.0 through 4.1.5; 4.2.1 |
| CVE-2021-28665 | 7.5 | May 6 | Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources,… Affected: 3.8.0 before 3.11.5; 4.0.0 before 4.1.5 |
| CVE-2020-7466 | 7.5 | Oct 6 | The PPP implementation of MPD before 5.9 allows a remote attacker who can send specifically crafted PPP authentication message to cause the daemon to read beyond allocated memory… Affected: 4.0.0 before 4.3.17; 4.4.0 |
| CVE-2023-0286 | 7.4 | Feb 8 | X.400 address type confusion in X.509 GeneralName Affected: 2.7.0 before 2.7.11; 2.8.0 before 3.7.34; 3.8.0 before 3.11.22; 4.0.0 before 4.3.16; 4.4.0 before 4.6.3 |
| CVE-2023-34198 | 7.3 | Feb 29 | In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 through 4.6.5 before… Affected: 1.0.0 before 3.7.37; 3.8.0 before 3.11.25; 4.0.0 before 4.3.19; 4.4.0 before 4.6.6; 4.7.0 |
| CVE-2021-28962 | 7.2 | Jan 31 | Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands Affected: 2.5.0 before 2.7.9; 2.8.0 before 3.7.21; 3.8.0 before 3.11.9; 4.0.0 before 4.2.2 |
| CVE-2026-113808 | 7.1 | Oct 20 | Stored XSS on SNS Enrollment Portal Affected: 4.3.0 through 4.3.44; 4.8.0 through 4.8.19; 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
| CVE-2026-113810 | 7.0 | Oct 20 | Stored XSS on SNS Enrollment Portal Affected: 4.8.0 through 4.8.19; 5.0.0 through 5.0.9; 5.1.0 through 5.1.3 |
Showing 21