Stormshield Luki w zabezpieczeniach

Oś czasu

Rodzaj

Not Defined36
Network Encryption Software3
Firewall Software1

Produkt

Stormshield Network Security14
Stormshield Endpoint Security7
Stormshield SES Evolution5
Stormshield SNS4
Stormshield Network Security Services3

Przeciwdziałanie

Official Fix23
Temporary Fix0
Workaround0
Unavailable0
Not Defined17

Wykorzystywanie

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined40

Wektor dostępu

Not Defined0
Physical0
Local3
Adjacent26
Network11

Uwierzytelnianie

Not Defined0
High3
Low31
None6

Interakcja z użytkownikiem

Not Defined0
Required4
None36

C3BM Index

CVSSv3 Base

≤10
≤20
≤31
≤49
≤59
≤612
≤77
≤82
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤31
≤49
≤59
≤613
≤76
≤82
≤90
≤100

VulDB

≤10
≤21
≤32
≤413
≤55
≤612
≤73
≤84
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤53
≤65
≤71
≤87
≤91
≤100

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Sprzedawca

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Exploit 0-day

<1k18
<2k17
<5k5
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj dzisiaj

<1k37
<2k3
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Wykorzystaj wielkość rynku

🔴 CTI Zajęcia

Affected Products (10): Endpoint Security (7), Endpoint Security Evolution (2), Network Security (14), Network Security Services (3), SES Evolution (5), SNS (4), SNS Firewall (1), SSL VPN Client (2), SSO Agent (1), VPN SSL Client (1)

OpublikowanoBaseTempSłaby punktProdWykPrzEPSSCTICVE
2023-12-264.74.7Stormshield Network Security Services Syslog weak encryptionNieznanyNot DefinedOfficial Fix0.000870.00CVE-2023-28616
2023-12-255.55.3Stormshield Network Security Services SNS Firewall privilege escalationNieznanyNot DefinedOfficial Fix0.000430.04CVE-2023-41165
2023-12-255.55.3Stormshield Network Security Services Inactive DHCP Interface privilege escalationNieznanyNot DefinedOfficial Fix0.000430.02CVE-2023-34198
2023-12-256.56.4Stormshield Network Security Cookie privilege escalationNieznanyNot DefinedOfficial Fix0.000460.00CVE-2023-47091
2023-08-285.45.3Stormshield SSL VPN Client Address Book privilege escalationNetwork Encryption SoftwareNot DefinedOfficial Fix0.000460.00CVE-2022-46783
2023-08-285.55.4Stormshield Network Security SIP Packet denial of serviceNieznanyNot DefinedOfficial Fix0.000460.03CVE-2023-26095
2023-08-266.66.6Stormshield VPN SSL Client privilege escalationNetwork Encryption SoftwareNot DefinedNot Defined0.000430.00CVE-2021-27932
2023-08-264.54.5Stormshield SNS cross site scriptingNieznanyNot DefinedNot Defined0.000510.00CVE-2020-11711
2023-08-057.87.6Stormshield SSL VPN Client OpenVPN Local Privilege EscalationNetwork Encryption SoftwareNot DefinedOfficial Fix0.000430.00CVE-2022-46782
2023-06-286.76.7Stormshield Endpoint Security Evolution SES Evolution Agent privilege escalationNieznanyNot DefinedNot Defined0.000430.00CVE-2023-35799

30 więcej wpisów nie jest pokazywanych

🔒 Login Required

You need to signup and login to see more of the remaining 30 results.

◂ PoprzedniPrzeglądKolejny ▸

Do you know our Splunk app?

Download it now for free!