CVE-2021-28665

HIGH

Stormshield Network Security < 3.7.18 - Memory Leak

Title source: rule

Description

Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service.

References (2)

[Broken Link] https://advisories-admin.stormshield.eu/2021-014

[Vendor Advisory] https://advisories.stormshield.eu/

Scores

CVSS v3 7.5

EPSS 0.0047

EPSS Percentile 64.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

CWE

CWE-401

Status published

Affected Products (2)

stormshield/network_security < 3.7.18

stormshield/stormshield_network_security < 3.11.5

Timeline

Published May 06, 2021

Tracked Since Feb 18, 2026