CVE-2021-3384
First published: Tue Mar 02 2021(Updated: )
A vulnerability in Stormshield Network Security could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system to contact new hosts via IPv4 or IPv6. This affects versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.4, and 4.0.0 to 4.1.5. Fixed in versions 2.7.8, 3.7.17, 3.11.5, and 4.2.0.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Stormshield Network Security | >=2.0.0<2.7.8 | |
| Stormshield Network Security | >=2.8.0<=2.16.0 | |
| Stormshield Network Security | >=3.0.0<=3.7.17 | |
| Stormshield Network Security | >=3.8.0<=3.11.5 | |
| Stormshield Network Security | >=4.0.0<4.1.5 | |
| Stormshield Stormshield Network Security | >=2.0.0<2.7.8 | |
| Stormshield Stormshield Network Security | >=2.8.0<=2.16.0 | |
| Stormshield Stormshield Network Security | >=3.0.0<=3.7.17 | |
| Stormshield Stormshield Network Security | >=3.8.0<=3.11.5 | |
| Stormshield Stormshield Network Security | >=4.0.0<4.1.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2021-3384.
What is the severity of CVE-2021-3384?
The severity of CVE-2021-3384 is medium with a CVSS score of 5.3.
Which versions of Stormshield Network Security are affected by CVE-2021-3384?
Versions 2.0.0 to 2.7.7, 2.8.0 to 2.16.0, 3.0.0 to 3.7.16, 3.8.0 to 3.11.5, and 4.0.0 to 4.1.5 of Stormshield Network Security are affected.
How does CVE-2021-3384 impact the system?
CVE-2021-3384 could allow an attacker to trigger a protection related to ARP/NDP tables management, which would temporarily prevent the system from contacting new hosts via IPv4 or IPv6.
Is there a fix available for CVE-2021-3384?
Yes, a fix is available for CVE-2021-3384. It is recommended to update to a patched version of Stormshield Network Security.
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/author
- agent/references
- agent/severity
- agent/tags
- agent/description
- agent/first-publish-date
- agent/event
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- vendor/stormshield
- canonical/stormshield network security
- version/stormshield network security/2.0.0
- version/stormshield network security/2.8.0
- version/stormshield network security/2.16.0
- version/stormshield network security/3.0.0
- version/stormshield network security/3.7.17
- version/stormshield network security/3.8.0
- version/stormshield network security/3.11.5
- version/stormshield network security/4.0.0
- canonical/stormshield stormshield network security
- version/stormshield stormshield network security/2.0.0
- version/stormshield stormshield network security/2.8.0
- version/stormshield stormshield network security/2.16.0
- version/stormshield stormshield network security/3.0.0
- version/stormshield stormshield network security/3.7.17
- version/stormshield stormshield network security/3.8.0
- version/stormshield stormshield network security/3.11.5
- version/stormshield stormshield network security/4.0.0