CVE-2022-30279

7.5 highEPSS 1.0%

High (7.5) in stormshield stormshield network security. EPSS 1.0% chance of exploitation in the next 30 days.

An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing of a NULL pointer, leading to a crash of SNS. An attacker could exploit this vulnerability via forged sofbus lacbus traffic to cause a firmware crash.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 62% of CVEs (scores of 2026-10-31)
CWE: CWE-476
Published: 2022-05-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

stormshield:stormshield_network_security

References

https://advisories.stormshield.eu/2022-015
https://advisories.stormshield.eu/2022-015

Check your stack JSON