CVE-2021-28096: Stormshield Network Security

Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days.

An issue was discovered in Stormshield SNS before 4.2.3 (when the proxy is used). An attacker can saturate the proxy connection table. This would result in the proxy denying any new connections.

Affected products

• Stormshield Stormshield Network Security: from 2.0.0, up to and including 2.7.8; from 3.7.6, up to and including 3.7.20; from 3.8.0, up to and including 3.11.8; from 4.0.1, before 4.2.3 (fixed in 4.2.3)

Published 2022-01-27. Last modified 2026-06-17.