PT-2023-30300 · Stormshield · Stormshield Network Security
CVE-2023-47091
·
Published
2023-12-25
·
Updated
2024-08-20
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Stormshield Network Security (SNS) versions 4.3.13 through 4.3.22
Stormshield Network Security (SNS) versions 4.6.0 through 4.6.9
Stormshield Network Security (SNS) versions 4.7.0 through 4.7.1
Description
An issue was discovered in Stormshield Network Security (SNS) where an attacker can overflow the cookie threshold, making an IPsec connection impossible.
Recommendations
For versions 4.3.13 through 4.3.22, update to version 4.3.23 or later.
For versions 4.6.0 through 4.6.9, update to version 4.6.10 or later.
For versions 4.7.0 through 4.7.1, update to version 4.7.2 or later.
Fix
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Stormshield Network Security