CVE-2022-27812 — Uncontrolled Resource Consumption in Network Security

CWE-400 — Uncontrolled Resource Consumption3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.4%
top 39.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Stormshield Network Security
Timeline
PublishedAug 24
Latest updateAug 25

Description

Flooding SNS firewall versions 3.7.0 to 3.7.29, 3.11.0 to 3.11.17, 4.2.0 to 4.2.10, and 4.3.0 to 4.3.6 with specific forged traffic, can lead to SNS DoS.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-3qrj-m697-ww2v: Flooding SNS firewall 3↗2022-08-25
▶
CVEList
CVE-2022-27812: Flooding SNS firewall versions 3↗2022-08-24
▶
CVE-2022-27812 — Uncontrolled Resource Consumption | cvebase