What’s Vulnerable › Vulnerabilities

CVE-2021-28962

• Severity: high (CVSS 7.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-01-31 · updated 2026-06-17

Description

Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.

Affected products

• Stormshield Network Security: from 2.5.0 before 2.7.9; from 2.8.0 before 3.7.21; from 3.8.0 before 3.11.9; from 4.0.0 before 4.2.2 — fixed in 2.7.9, 3.11.9, 3.7.21, 4.2.2

How to fix

Upgrade to a fixed version: Stormshield Network Security 2.7.9, 3.11.9, 3.7.21, 4.2.2. Check the vendor advisory for mitigations.

References

• https://advisories.stormshield.eu/
• https://advisories.stormshield.eu/2021-007/
• https://documentation.stormshield.eu/SNS/v4/en/Content/Release_Notes_SNS/Getting_Started_RNO.htm
• https://advisories.stormshield.eu/
• https://advisories.stormshield.eu/2021-007/
• https://documentation.stormshield.eu/SNS/v4/en/Content/Release_Notes_SNS/Getting_Started_RNO.htm

Get alerted when CVE-2021-28962 or the next vulnerability affects your stack