CVE-2021-3398
published 2022-02-10CVE-2021-3398: Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.
PriorityP426medium5.8CVSS 3.1
AVNACLPRNUINSCCNINAL
EPSS
0.91%
55.5th percentile
Stormshield Network Security (SNS) 3.x has an Integer Overflow in the high-availability component.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| stormshield | stormshield_network_security | 3.0.0 – 3.7.24 | — |
| stormshield | stormshield_network_security | 3.8.0 – 3.11.12 | — |
CVSS provenance
nvdv3.15.8MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
nvdv2.05.0MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Suricata
ET EXPLOIT Confluence Server Path Traversal Vulnerability (CVE-2019-3398)
suricata·2021-10-27·CVSS 8.8
CVE-2019-3398 [HIGH] ET EXPLOIT Confluence Server Path Traversal Vulnerability (CVE-2019-3398)
ET EXPLOIT Confluence Server Path Traversal Vulnerability (CVE-2019-3398)
Rule: alert http any any -> [$HOME_NET,$HTTP_SERVERS] 8090 (msg:"ET EXPLOIT Confluence Server Path Traversal Vulnerability (CVE-2019-3398)"; flow:established,to_server; http.method; content:"POST"; http.uri; content:"plugins/drag-and-drop/upload.action"; nocase; fast_pattern; content:"draftId="; nocase; distance:0; content:"filename="; nocase; content:"/shell.jsp"; nocase; content:"atl_token"; nocase; http.request_body; content:"<%"; reference:url,github.com/superevr/cve-2019-3398/blob/master/poc.py; reference:cve,2019-3398; classtype:attempted-admin; sid:2034261; rev:1; metadata:created_at 2021_10_27, cve CVE_2019_3398, deployment Perimeter, deployment Internal, confidence High, signature_severity Major, tag CISA_K
No public exploits indexed.
No writeups or analysis indexed.
2022-02-10
Published