CVE-2022-27812

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.
References
Link Resource
https://advisories.stormshield.eu/2022-009/ Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*
cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*
cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*
cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*

History

08 Aug 2023, 14:22

Type Values Removed Values Added
CWE CWE-400 NVD-CWE-noinfo

17 Nov 2022, 04:15

Type Values Removed Values Added
Summary Flooding SNS firewall 3.7.0 to 3.7.26 with udp or icmp randomizing the source through an internal to internal or external to internal interfaces will lead the firewall to overwork. It will consume 100% CPU, 100 RAM and won't be available and can crash. Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.

28 Aug 2022, 23:52

Type Values Removed Values Added
References (MISC) https://advisories.stormshield.eu/2022-009/ - (MISC) https://advisories.stormshield.eu/2022-009/ - Vendor Advisory
CWE CWE-400
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 7.5
First Time Stormshield
Stormshield network Security
CPE cpe:2.3:a:stormshield:network_security:*:*:*:*:*:*:*:*

24 Aug 2022, 12:15

Type Values Removed Values Added
New CVE

Information

Published : 2022-08-24 12:15

Updated : 2023-12-10 14:35


NVD link : CVE-2022-27812

Mitre link : CVE-2022-27812

CVE.ORG link : CVE-2022-27812


JSON object : View

Products Affected

stormshield

  • network_security