First published: Thu Feb 10 2022(Updated: )
In Stormshield 1.1.0, and 2.1.0 through 2.9.0, an attacker can block a client from accessing the VPN and can obtain sensitive information through the SN VPN SSL Client.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Stormshield Stormshield Network Security | >=2.1.0<=2.9.0 | |
Stormshield Stormshield Network Security | =1.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-31814 is a vulnerability found in Stormshield Network Security versions 1.1.0 through 2.9.0, allowing an attacker to block client access to the VPN and obtain sensitive information through the SN VPN SSL Client.
CVE-2021-31814 has a severity rating of medium, with a CVSS score of 6.1.
An attacker can exploit CVE-2021-31814 by blocking a client from accessing the VPN and gaining sensitive information through the SN VPN SSL Client in Stormshield Network Security versions 1.1.0 through 2.9.0.
Stormshield Network Security versions 1.1.0 through 2.9.0 are affected by CVE-2021-31814.
To mitigate the CVE-2021-31814 vulnerability, it is recommended to update to a fixed version of Stormshield Network Security as soon as possible.