CVE-2021-28962: Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.

PriorityP343high7.2CVSS 3.1

AVNACLPRHUINSUCHIHAH

EPSS

1.16%

63.2th percentile

Stormshield Network Security (SNS) before 4.2.2 allows a read-only administrator to gain privileges via CLI commands.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
stormshield	stormshield_network_security	>= 2.5.0 < 2.7.9	2.7.9
stormshield	stormshield_network_security	>= 2.8.0 < 3.7.21	3.7.21
stormshield	stormshield_network_security	>= 3.8.0 < 3.11.9	3.11.9
stormshield	stormshield_network_security	>= 4.0.0 < 4.2.2	4.2.2

CVSS provenance

nvdv3.17.2HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.