Are there public exploits for stormshield stormshield management center vulnerabilities?

Yes — 4 of stormshield stormshield management center's CVEs have a known public exploit.

Which versions of stormshield stormshield management center are affected?

6 distinct stormshield stormshield management center versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in stormshield stormshield management center CVEs?

stormshield stormshield management center's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-416 (Use After Free).

How many critical stormshield stormshield management center vulnerabilities are there?

stormshield stormshield management center has 2 critical and 5 high-severity CVEs.

What is the average severity of stormshield stormshield management center CVEs?

The average CVSS base score across stormshield stormshield management center's scored CVEs is 7.8.

RadicalNotion.AI

Log in Create an account

stormshield

8 CVEs

stormshield management center Vulnerabilities

Name: stormshield management center vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for stormshield management center by stormshield.

8

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

4

Public exploits

PoC or exploit code

7.8

Avg CVSS

2021–2023

Last updated February 8, 2023

Overview

stormshield management center has 8 published CVE records since 2021, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 4 have a known public exploit. The average CVSS base score across scored CVEs is 7.8.

Severity and exploitation

How the CVSS severity of stormshield management center's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical2

High5

Medium1

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of stormshield management center's CVEs are currently listed in CISA's KEV catalog.

Public exploits

4

4 of stormshield management center's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every stormshield management center version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.3.35 CVEs
< 3.3.22 CVEs
< 3.3.01 CVE

Fixed in

3.3.35 CVEs
3.3.22 CVEs
3.3.01 CVE

Find a version

8 CVEs

Sort

Use-after-free following BIO_new_NDEF
CVE-2023-0215
Patch
CWE-416
High · CVSS 7.5
EPSS 5.0% (92th pct)2023-02-08
Invalid pointer dereference in d2i_PKCS7 functions
CVE-2023-0216
Patch
CWE-476
High · CVSS 7.5
EPSS 1.8% (79th pct)2023-02-08
X.400 address type confusion in X.509 GeneralName
CVE-2023-0286
Patch
CWE-843
High · CVSS 7.4
EPSS 71.2% (99th pct)2023-02-08
NULL dereference during PKCS7 data verification
CVE-2023-0401
Patch
CWE-476
High · CVSS 7.5
EPSS 1.8% (79th pct)2023-02-08
Medium vulnerability · 2022-07-14
CVE-2022-32215
Public exploit
Patch
CWE-444
Medium · CVSS 6.5
EPSS 70.2% (99th pct)2022-07-14
llhttp allows HTTP Request Smuggling via Improper Delimiting of Header Fields
CVE-2022-32214
Public exploit
Patch
CWE-444
Critical · CVSS 9.1
EPSS 81.8% (100th pct)2022-07-14
llhttp allows HTTP Request Smuggling via Flawed Parsing of Transfer-Encoding
CVE-2022-32213
Public exploit
Patch
CWE-444
Critical · CVSS 9.1
EPSS 46.0% (99th pct)2022-07-14
High vulnerability · 2021-11-11
CVE-2002-20001
Public exploit
Patch
CWE-400
High · CVSS 7.5
EPSS 24.6% (98th pct)2021-11-11

Common weakness types

The CWE weakness categories most often found in stormshield management center CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many stormshield management center CVEs were published each year.

2021

1

2022

3

2023

4

Other stormshield products

Browse vulnerabilities for other products by stormshield.

stormshield network security39 CVEs endpoint security15 CVEs network security3 CVEs ssl vpn client3 CVEs sslvpn1 CVEs Stormshield Network Security (SNS)1 CVEs

All stormshield vulnerabilities

Frequently asked questions

Common questions about stormshield management center vulnerabilities.

How many CVEs does stormshield stormshield management center have?: stormshield stormshield management center has 8 published CVE records since 2021.
How many stormshield stormshield management center CVEs are in CISA KEV?: None of stormshield stormshield management center's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for stormshield stormshield management center vulnerabilities?: Yes — 4 of stormshield stormshield management center's CVEs have a known public exploit.
Which versions of stormshield stormshield management center are affected?: 6 distinct stormshield stormshield management center versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in stormshield stormshield management center CVEs?: stormshield stormshield management center's CVEs most often map to these CWE weakness types: CWE-444 (Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')), CWE-476 (NULL Pointer Dereference), CWE-400 (Uncontrolled Resource Consumption), CWE-416 (Use After Free).
How many critical stormshield stormshield management center vulnerabilities are there?: stormshield stormshield management center has 2 critical and 5 high-severity CVEs.
What is the average severity of stormshield stormshield management center CVEs?: The average CVSS base score across stormshield stormshield management center's scored CVEs is 7.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track stormshield management center vulnerabilities

Get an alert for each new stormshield management center CVE, with AI-written analysis and remediation steps.

Create an account See pricing