CVE-2023-41166

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Dec 21, 2023
Updated: Dec 29, 2023

Summary

CVE-2023-41166 is a vulnerability affecting multiple versions of Stormshield Network Security (SNS), including 3.7.0-3.7.39, 3.11.0-3.11.27, 4.3.0-4.3.22, 4.6.0-4.6.9, and 4.7.0-4.7.1. This issue enables an attacker to determine if a specific user account exists on an SNS firewall through remote access commands, posing a potential security risk. The vulnerability has been identified and affected users are urged to apply the necessary patches to mitigate this threat.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share