CVE-2021-28665: Stormshield Network Security

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

Stormshield SNS with versions before 3.7.18, 3.11.6 and 4.1.6 has a memory-management defect in the SNMP plugin that can lead to excessive consumption of memory and CPU resources, and possibly a denial of service.

Affected products

• Stormshield Network Security: from 3.0.0, before 3.7.18 (fixed in 3.7.18)
• Stormshield Stormshield Network Security: from 3.8.0, before 3.11.5 (fixed in 3.11.5); from 4.0.0, before 4.1.5 (fixed in 4.1.5)

Published 2021-05-06. Last modified 2026-06-17.