CVE-2020-8430: Stormshield Network Security

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Stormshield Network Security 310 3.7.10 devices have an auth/lang.html?rurl= Open Redirect vulnerability on the captive portal. For example, the attacker can use rurl=//example.com instead of rurl=https://example.com in the query string.

Affected products

• Stormshield Stormshield Network Security: from 3.0.0, up to and including 3.7.10; from 3.8.0, up to and including 3.10.0; from 4.0.0, up to and including 4.0.1

Published 2020-04-13. Last modified 2026-06-17.