CVE-2021-31617: Stormshield Network Security

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

In ASQ in Stormshield Network Security (SNS) 1.0.0 through 2.7.8, 2.8.0 through 2.16.0, 3.0.0 through 3.7.20, 3.8.0 through 3.11.8, and 4.0.1 through 4.2.2, mishandling of memory management can lead to remote code execution.

Affected products

• Stormshield Stormshield Network Security: from 1.0.0, before 2.7.9 (fixed in 2.7.9); from 2.8.0, before 3.7.21 (fixed in 3.7.21); from 3.8.0, before 3.11.9 (fixed in 3.11.9); from 4.0.1, before 4.2.3 (fixed in 4.2.3)

Published 2022-01-31. Last modified 2026-06-17.