Cyber Resilience

CVE-2023-34198

Stormshield Network Security 1.0.0 – 3.7.37

Published
29 February 2024
Modified
14 February 2025
Patch / advisory
View advisory
CVSS Score v3.1 7.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score 0.0051 41th percentile
Risk Priority 56 floored blend · peak EPSS

Summary

CVE-2023-34198 is a high-severity an unspecified weakness vulnerability in Stormshield Stormshield Network Security. Its CVSS base score is 7.3 (High).

Operationally, ranked at the 41th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

In Stormshield Network Security (SNS) 1.0.0 through 3.7.36 before 3.7.37, 3.8.0 through 3.11.24 before 3.11.25, 4.0.0 through 4.3.18 before 4.3.19, 4.4.0 through 4.6.5 before 4.6.6, and 4.7.0 before 4.7.1, the usage of a Network object created from an inactive DHCP…

more

interface in the filtering slot results in the usage of an object of the :any" type, which may have unexpected results for access control.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-47093Same product: Stormshield Stormshield Network Security
CVE-2023-28616Same product: Stormshield Stormshield Network Security
CVE-2023-41166Same product: Stormshield Stormshield Network Security
CVE-2023-41165Same product: Stormshield Stormshield Network Security
CVE-2023-47091Same product: Stormshield Stormshield Network Security
CVE-2023-26095Same product: Stormshield Stormshield Network Security
CVE-2025-48707Same product: Stormshield Stormshield Network Security
CVE-2023-23562Same vendor: Stormshield
CVE-2023-23561Same vendor: Stormshield
CVE-2023-35799Same vendor: Stormshield

Affected Assets

stormshield
stormshield network security
4.7.0 · 1.0.0 — 3.7.37 · 3.8.0 — 3.11.25 · 4.0.0 — 4.3.19

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References