CVE-2023-41166

Published: Dec 21, 2023Modified: Jun 17, 2026

5.3

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 3.9 / Impact: 1.4

Source: NVD

Description

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know if a specific user account exists on the SNS firewall by using remote access commands.

Affected (5)

Products: Stormshield: Stormshield Network Security

Stormshield

1 product

Stormshield Network Security

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Stormshield Stormshield Network Security	From 3.11.0 to 3.11.27
Stormshield Stormshield Network Security	From 3.7.0 to 3.7.39
Stormshield Stormshield Network Security	From 4.3.0 to 4.3.23
Stormshield Stormshield Network Security	From 4.6.0 to 4.6.10
Stormshield Stormshield Network Security	From 4.7.0 to 4.7.2

References (2)

https://advisories.stormshield.eu/2023-027

Source: cve@mitre.org

Vendor Advisory

https://advisories.stormshield.eu/2023-027

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.