Privilege Escalation in Stormshield Network Security by Read-Only Administrators
CVE-2021-28962

7.2HIGH

Key Information:

Vendor: Stormshield
Status: Network Security
Vendor: CVE Published:; 31 January 2022

🔔 Create Stormshield Vulnerability Alert

What is CVE-2021-28962?

A vulnerability exists in Stormshield Network Security (SNS) that allows read-only administrators to execute CLI commands, potentially enabling them to gain unauthorized privileges. This could lead to further exploitation of the network security system if not addressed swiftly. It is crucial for users to upgrade to version 4.2.2 or later to mitigate this risk effectively.