CVE-2022-30279

Name of the Vulnerable Software and Affected Versions Stormshield Network Security (SNS) versions 4.3.x through 4.3.7

Description An issue was discovered in the event logging of the ASQ sofbus lacbus plugin, which triggers the dereferencing of a NULL pointer, leading to a crash of the system. An attacker could exploit this via forged sofbus lacbus traffic to cause a firmware crash.

Recommendations For Stormshield Network Security (SNS) versions 4.3.x through 4.3.7, update to version 4.3.8 or later to resolve the issue. As a temporary workaround, consider restricting access to the ASQ sofbus lacbus plugin to minimize the risk of exploitation.