Read the docs

Stormshield

Records69All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9

Exploited now

Stormshield records in CISA KEV

No Stormshield vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Stormshield Network Security 34 records HIGH Endpoint Security 15 records MEDIUM Stormshield Management Center 8 records HIGH Network Security 3 records LOW Ssl Vpn Client 3 records LOW Sslvpn 1 record MEDIUM

Records

1 record in Sslvpn · all components

TI-2022-03942 CVE-2022-4304 · GHSA-p52g-cm5j-mjv4

Timing Oracle in RSA Decryption

Priority MEDIUM 47

A timing based side channel exists in the OpenSSL RSA Decryption implementation which could be sufficient to recover a plaintext across a network in a Bleichenbacher style attack.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.23509 Published 2023-02-08 Partial fix · 3.0.8, 1.1.1t +3 CWE-203
Open these records in search →