CVEvulnerability
CVE-2021-28096
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-01-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-770
Description
An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.
Affected configurations
• stormshield stormshield network security (>= 2.0.0 <= 2.7.8)
• stormshield stormshield network security (>= 3.7.6 <= 3.7.20)
• stormshield stormshield network security (>= 3.8.0 <= 3.11.8)
• stormshield stormshield network security (>= 4.0.1 < 4.2.3)
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://advisories.stormshield.eu/2021-005/ Vendor Advisory
- https://advisories.stormshield.eu/2021-005/ Vendor Advisory