Stormshield Network Security

CVSS v3.1 Overall Score: 0      

Analysis

Impacted version

SNS appliances rely on the OpenSSL component, and multiple vulnerabilities have been identified on OpenSSL, making the SNS firewalls usceptible to some kind of attacks.

Some distant attacker could exploit these vulnerabilities, by sending especially crafted files leading to a denial of service of the SSL protocol, a crash of the service or a remote code execution.

Update of 04/27/2026: SNS is not affected by these vulnerabilities because they require certain TLS features that are not enabled and used by SNS.

CVSS Score update from 4.1 (Medium) to 0;

Update of 04/27/2026 : These versions are not vulnerable, but they include a vulnerable version of OpenSSL.

• SNS 5.0.0 to 5.0.4
• SNS 4.4.0 to 4.8.14
• SNS 4.3.0 to 4.3.41

Workaround solution

Solution

There is no workaround solution.

The following versions update Openssl:

• SNS 5.0.5
• SNS 4.8.15
• SNS 4.3.42