Stormshield Network Security

CVSS v2 Overall Score: 6.2      

Analysis

Impacted version

The SNS (serverd) command-line service can be bruteforced, an attacker can remotely gain administrator rights on the firewall.

• SNS 2.X
• SNS 3.0.0 to 3.9.2
• SNS 4.0.X

Workaround solution

Solution

Control and restrict administration API port usage:

• If the ‘serverd’ implicit rule is disabled ( by default it’s the case ) ensure that you do not explicitely authorize traffic to the UTM to the service ‘serverd’ (port 1300 by default) from untrusted networks in your explicit filtering rules
• If you have activated the ‘serverd’ implict rule ensure that serverd is only accessible via trusted networks by the explicit filtering rules
• Monitor the access logs of the UTM.

For further details, please consult the document “SNS 2.7.4 ANSSI qualification – C7 condition”.

The 3.10.0 and 4.1.1 updates will fix this vulnerability.

Netasq

CVSS v2 Overall Score: 7.1      

Analysis

Impacted version

The command-line service of Netasq UTMs (serverd) can be bruteforced, an attacker can remotely gain administrator rights on the firewall.

• Netasq 9.X

Workaround solution

Solution

There is no workaround solution.

No solution