PT-2023-20483 · Stormshield · Stormshield Network Security

Published 2023-08-28 · Updated 2024-10-02 · CVE-2023-26095

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Stormshield Network Security (SNS) versions 4.3.15 through 4.3.15 Stormshield Network Security (SNS) versions 4.6.x through 4.6.2

Description The issue allows a crash when analyzing a crafted SIP packet.

Recommendations For Stormshield Network Security (SNS) version 4.3.15, update to version 4.3.16. For Stormshield Network Security (SNS) version 4.6.x, update to version 4.6.3.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-26095

Affected Products

Stormshield Network Security

References · 6

• https://osv.dev/vulnerability/CVE-2023-26095 · Vendor Advisory
• https://advisories.stormshield.eu/2023-007 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-26095 · Security Note
• https://t.me/cvenotify/96850 · Telegram Post
• https://twitter.com/CVEnew/status/1696125990370410749 · Twitter Post
• https://t.me/cvenotify/91299 · Telegram Post