PT-2023-30300 · Stormshield · Stormshield Network Security

Published 2023-12-25 · Updated 2024-08-20 · CVE-2023-47091

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Stormshield Network Security (SNS) versions 4.3.13 through 4.3.22 Stormshield Network Security (SNS) versions 4.6.0 through 4.6.9 Stormshield Network Security (SNS) versions 4.7.0 through 4.7.1

Description An issue was discovered in Stormshield Network Security (SNS) where an attacker can overflow the cookie threshold, making an IPsec connection impossible.

Recommendations For versions 4.3.13 through 4.3.22, update to version 4.3.23 or later. For versions 4.6.0 through 4.6.9, update to version 4.6.10 or later. For versions 4.7.0 through 4.7.1, update to version 4.7.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-120

Related Identifiers

CVE-2023-47091

Affected Products

Stormshield Network Security

References · 7

• https://advisories.stormshield.eu · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-47091 · Security Note
• https://advisories.stormshield.eu/2023-024 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-47091 · Vendor Advisory
• https://t.me/cvenotify/65096 · Telegram Post
• https://t.me/cvenotify/66140 · Telegram Post
• https://t.me/cvenotify/91300 · Telegram Post