Cyber Resilience

CVE-2023-41166

Stormshield Network Security 3.7.0 – 3.7.39

Published
21 December 2023
Modified
21 November 2024
Patch / advisory
View advisory
CVSS Score v3.1 5.3
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS Score 0.0040 33th percentile
Risk Priority 44 floored blend · peak EPSS

Summary

CVE-2023-41166 is a medium-severity an unspecified weakness vulnerability in Stormshield Stormshield Network Security. Its CVSS base score is 5.3 (Medium).

Operationally, ranked at the 33th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

EU & UK References

Vulnerability Data

An issue was discovered in Stormshield Network Security (SNS) 3.7.0 through 3.7.39, 3.11.0 through 3.11.27, 4.3.0 through 4.3.22, 4.6.0 through 4.6.9, and 4.7.0 through 4.7.1. It's possible to know if a specific user account exists on the SNS firewall by…

more

using remote access commands.

CWE(s)
NVD-CWE-noinfo

Related Threats

CVEs Like This One

CVE-2023-47093Same product: Stormshield Stormshield Network Security
CVE-2023-28616Same product: Stormshield Stormshield Network Security
CVE-2023-41165Same product: Stormshield Stormshield Network Security
CVE-2023-47091Same product: Stormshield Stormshield Network Security
CVE-2023-34198Same product: Stormshield Stormshield Network Security
CVE-2023-26095Same product: Stormshield Stormshield Network Security
CVE-2025-48707Same product: Stormshield Stormshield Network Security
CVE-2023-23562Same vendor: Stormshield
CVE-2023-23561Same vendor: Stormshield
CVE-2023-35799Same vendor: Stormshield

Affected Assets

stormshield
stormshield network security
3.7.0 — 3.7.39 · 3.11.0 — 3.11.27 · 4.3.0 — 4.3.23

Mitigating Controls

No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.

References