PT-2021-20341 · Stormshield · Stormshield Network Security

P_Jalaber · Published 2021-03-02 · Updated 2024-08-20 · CVE-2021-3384

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Stormshield Network Security versions 2.0.0 through 2.7.7 Stormshield Network Security versions 2.8.0 through 2.16.0 Stormshield Network Security versions 3.0.0 through 3.7.16 Stormshield Network Security versions 3.8.0 through 3.11.4 Stormshield Network Security versions 4.0.0 through 4.1.5

Description: A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system from contacting new hosts via IPv4 or IPv6.

Recommendations: For versions 2.0.0 through 2.7.7, update to version 2.7.8 or later. For versions 2.8.0 through 2.16.0, update to version 3.7.17 or later, but since 2.16.0 is before 3.0.0, the correct update path would be to first reach version 3.0.0 and then update to 3.7.17 or later. For versions 3.0.0 through 3.7.16, update to version 3.7.17 or later. For versions 3.8.0 through 3.11.4, update to version 3.11.5 or later. For versions 4.0.0 through 4.1.5, update to version 4.2.0 or later.

Fix

Related Identifiers

CVE-2021-3384

Affected Products

Stormshield Network Security

References · 5

• https://osv.dev/vulnerability/CVE-2021-3384 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-3384 · Security Note
• https://advisories.stormshield.eu/2020-049 · Vendor Advisory
• https://t.me/cibsecurity/24351 · Telegram Post
• https://t.me/cvenotify/91291 · Telegram Post