CVEvulnerability
CVE-2021-3384
5.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2021-03-02
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 5.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Description
A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0.
Affected configurations
• stormshield stormshield network security (>= 2.0.0 < 2.7.8)
• stormshield stormshield network security (>= 2.8.0 <= 2.16.0)
• stormshield stormshield network security (>= 3.0.0 <= 3.7.17)
• stormshield stormshield network security (>= 3.8.0 <= 3.11.5)
• stormshield stormshield network security (>= 4.0.0 < 4.1.5)
References
- https://advisories.stormshield.eu/2020-049/ Vendor Advisory
- https://advisories.stormshield.eu/2020-049/ Vendor Advisory