Overview 29 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 public PoC · 2 EPSS ≥ 0.5
29matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
1public PoC3.4%
2EPSS ≥ 0.56.9%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
0
0.0%
Not applicable
29
100.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
29
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
1
3.4%
Forecast only
2
6.9%
No public exploit
26
89.7%
split by
peak 5 / quarter
Q2 201
Not applicable1
Medium1
not blocked1
No public exploit1
Q3 200
Q4 200
Q1 212
Not applicable2
Medium2
not blocked2
No public exploit2
Q2 210
Q3 215
Not applicable5
Medium5
not blocked5
No public exploit5
Q4 212
Not applicable2
Medium2
not blocked2
No public exploit2
Q1 225
Not applicable5
Medium5
not blocked5
No public exploit5
Q2 220
Q3 223
Not applicable3
Medium3
not blocked3
Forecast only2
No public exploit1
Q4 220
Q1 232
Not applicable2
Medium2
not blocked2
Proof of concept only1
No public exploit1
Q2 234
Not applicable4
Medium4
not blocked4
No public exploit4
Q3 232
Not applicable2
Medium2
not blocked2
No public exploit2
Q4 232
Not applicable2
Medium2
not blocked2
No public exploit2
Q1 241
Not applicable1
Medium1
not blocked1
No public exploit1
Q3 20Q1 21Q3 21Q1 22Q3 22Q1 23Q3 23Q1 24
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-41165 | Medium | 2024-02-29 | Not applicable | No public exploit | An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.38 before 3.7.39, 3.10.0 through 3.11.26 before 3.11.27, 4.0 through 4.3.21 before 4.3.22, and 4.4.0 through 4.6.8 before 4.6.9. An administrator with write access to the SNS firewall can configure a login disclaimer with malicious JavaScript elements that can result in data theft. |
| CVE-2023-47093 | Medium | 2023-12-21 | Not applicable | No public exploit | An issue was discovered in Stormshield Network Security (SNS) 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0. Sending a crafted ICMP packet may lead to a crash of the ASQ engine. |
| CVE-2023-41166 | Medium | 2023-12-21 | Not applicable | No public exploit | An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know if a specific user account exists on the SNS firewall by using remote access commands. |
| CVE-2022-46783 | Medium | 2023-08-28 | Not applicable | No public exploit | An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book. |
| CVE-2020-11711 | Medium | 2023-08-25 | Not applicable | No public exploit | An issue was discovered in Stormshield SNS 3.8.0. Authenticated Stored XSS in the admin login panel leads to SSL VPN credential theft. A malicious disclaimer file can be uploaded from the admin panel. The resulting file is rendered on the authentication interface of the admin panel. It is possible to inject malicious HTML content in order to execute JavaScript inside a victim's browser. This results in a stored XSS on the authentication interface of the admin panel. Moreover, an unsecured authentication form is present on the authentication interface of the SSL VPN captive portal. Users are allowed to save their credentials inside the browser. If an administrator saves his credentials through this unsecured form, these credentials could be stolen via the stored XSS on the admin panel without user interaction. Another possible exploitation would be modification of the authentication form of the admin panel into a malicious form. |
| CVE-2023-35800 | Medium | 2023-06-27 | Not applicable | No public exploit | Stormshield Endpoint Security Evolution 2.0.0 through 2.4.2 has Insecure Permissions. An ACL entry on the SES Evolution agent directory that contains the agent logs displayed in the GUI allows interactive users to read data, which could allow access to information reserved to administrators. |
| CVE-2023-35799 | Medium | 2023-06-27 | Not applicable | No public exploit | Stormshield Endpoint Security Evolution 2.0.0 through 2.3.2 has Insecure Permissions. An interactive user can use the SES Evolution agent to create arbitrary files with local system privileges. |
| CVE-2023-23562 | Medium | 2023-05-31 | Not applicable | No public exploit | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control that allows an authenticated user can update global parameters. |
| CVE-2023-23561 | Medium | 2023-05-30 | Not applicable | No public exploit | Stormshield Endpoint Security 2.3.0 through 2.3.2 has Incorrect Access Control: authenticated users can read sensitive information. |
| CVE-2023-20052 | Medium | 2023-03-01 | Not applicable | Proof of concept only | On Feb 15, 2023, the following vulnerability in the ClamAV scanning library was disclosed: A vulnerability in the DMG file parser of ClamAV versions 1.0.0 and earlier, 0.105.1 and earlier, and 0.103.7 and earlier could allow an unauthenticated, remote attacker to access sensitive information on an affected device. This vulnerability is due to enabling XML entity substitution that may result in XML external entity injection. An attacker could exploit this vulnerability by submitting a crafted DMG file to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to leak bytes from any file that may be read by the ClamAV scanning process. |
| CVE-2022-4304 | Medium | 2023-02-08 | Not applicable | No public exploit | A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack. To achieve a successful decryption an attacker would have to be able to send a very large number of trial messages for decryption. The vulnerability affects all RSA padding modes: PKCS#1 v1.5, RSA-OEAP and RSASVE. For example, in a TLS connection, RSA is commonly used by a client to send an encrypted pre-master secret to the server. An attacker that had observed a genuine connection between a client and a server could use this flaw to send trial messages to the server and record the time taken to process them. After a sufficiently large number of messages the attacker could recover the pre-master secret used for the original connection and thus be able to decrypt the application data sent over that connection. |
| CVE-2022-32215 | Medium | 2022-07-14 | Not applicable | Forecast only | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS). |
| CVE-2022-32214 | Medium | 2022-07-14 | Not applicable | Forecast only | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS). |
| CVE-2022-32213 | Medium | 2022-07-14 | Not applicable | No public exploit | The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS). |
| CVE-2021-37613 | Medium | 2022-02-10 | Not applicable | No public exploit | Stormshield Network Security (SNS) 1.0.0 through 4.2.3 allows a Denial of Service. |
| CVE-2021-3398 | Medium | 2022-02-10 | Not applicable | No public exploit | Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component. |
| CVE-2021-31814 | Medium | 2022-02-10 | Not applicable | No public exploit | In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client. |
| CVE-2021-28096 | Medium | 2022-01-27 | Not applicable | No public exploit | An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections. |
| CVE-2022-22703 | Medium | 2022-01-17 | Not applicable | No public exploit | In Stormshield SSO Agent 2.x before 2.1.1 and 3.x before 3.0.2, the cleartext user password and PSK are contained in the log file of the .exe installer. |
| CVE-2021-45091 | Medium | 2021-12-21 | Not applicable | No public exploit | Stormshield Endpoint Security from 2.1.0 to 2.1.1 has Incorrect Access Control. |
| CVE-2021-45089 | Medium | 2021-12-21 | Not applicable | No public exploit | Stormshield Endpoint Security 2.x before 2.1.2 has Incorrect Access Control. |
| CVE-2021-35957 | Medium | 2021-07-13 | Not applicable | No public exploit | Stormshield Endpoint Security Evolution 2.0.0 through 2.0.2 does not accomplish the intended defense against local administrators who can replace the Visual C++ runtime DLLs (in %WINDIR%\system32) with malicious ones. |
| CVE-2021-31223 | Medium | 2021-07-13 | Not applicable | No public exploit | SES Evolution before 2.1.0 allows reading some parts of a security policy by leveraging access to a computer having the administration console installed. |
| CVE-2021-31222 | Medium | 2021-07-13 | Not applicable | No public exploit | SES Evolution before 2.1.0 allows updating some parts of a security policy by leveraging access to a computer having the administration console installed. |
| CVE-2021-31221 | Medium | 2021-07-13 | Not applicable | No public exploit | SES Evolution before 2.1.0 allows deleting some parts of a security policy by leveraging access to a computer having the administration console installed. |
| CVE-2021-31220 | Medium | 2021-07-13 | Not applicable | No public exploit | SES Evolution before 2.1.0 allows modifying security policies by leveraging access of a user having read-only access to security policies. |
| CVE-2021-27506 | Medium | 2021-03-19 | Not applicable | No public exploit | The ClamAV Engine (version 0.103.1 and below) component embedded in Storsmshield Network Security (SNS) is subject to DoS in case of parsing of malformed png files. This affect Netasq versions 9.1.0 to 9.1.11 and SNS versions 1.0.0 to 4.2.0. This issue is fixed in SNS 3.7.19, 3.11.7 and 4.2.1. |
| CVE-2021-3384 | Medium | 2021-03-02 | Not applicable | No public exploit | A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0. |
| CVE-2020-8430 | Medium | 2020-04-13 | Not applicable | No public exploit | Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string. |