Description
A failure has been identified in the SNS during dynamic data files signature check. A logic error in the signature verification routine resulting in acceptance of unauthenticated dynamic data update during Autoupdate routine.
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
High
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Stormshield / Stormshield Network Security4.3.0 – 4.3.44
- Stormshield / Stormshield Network Security4.8.0 – 4.8.19
- Stormshield / Stormshield Network Security5.0.0 – 5.0.9
- Stormshield / Stormshield Network Security5.1.0 – 5.1.3
- Stormshield / Stormshield Network Security4.8.20 LTSB – 4.8.20 LTSB
- Stormshield / Stormshield Network Security5.0.10 – 5.0.10
- Stormshield / Stormshield Network Security5.1.4 EA – 5.1.4 EA
References
- VENDOR_ADVISORYhttps://advisories.stormshield.eu/2026-032/
Updated 10m ago · 8 sources