What’s Vulnerable › Vulnerabilities
CVE-2021-28096
- Severity: medium (CVSS 5.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2022-01-27 · updated 2026-06-17
- Weakness: CWE-770
Description
An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.
Affected products
- Stormshield Network Security: from 2.0.0 through 2.7.8; from 3.7.6 through 3.7.20; from 3.8.0 through 3.11.8; from 4.0.1 before 4.2.3 — fixed in 4.2.3
How to fix
Upgrade to a fixed version: Stormshield Network Security 4.2.3. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2021-28096 or the next vulnerability affects your stack