Description
A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
CVSS breakdown
CVSS 3.1
Attack Vector
Adjacent
Attack Complexity
Low
Privileges Required
High
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None
Affected products
- Stormshield / Stormshield Network Security4.3.0 – 4.3.41
- Stormshield / Stormshield Network Security4.8.0 – 4.8.15
- Stormshield / Stormshield Network Security5.0.0 – 5.0.5
References
- VENDOR_ADVISORYhttps://advisories.stormshield.eu/2025-007/
Updated 4m ago · 8 sources