Stormshield management center

This hub aggregates every CVE we track for Stormshield management center, a product in the networking infrastructure space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 8 most recently published vulnerabilities affecting Stormshield management center.

• CVE-2023-0215Use-after-free following BIO_new_NDEF7.5Feb 8, 2023
• CVE-2023-0216Invalid pointer dereference in d2i_PKCS7 functions7.5Feb 8, 2023
• CVE-2023-0286X.400 address type confusion in X.509 GeneralName7.4Feb 8, 2023
• CVE-2023-0401NULL dereference during PKCS7 data verification7.5Feb 8, 2023
• CVE-2022-32214The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not strictly use the CRLF sequence to delimit HTTP requests. This can lead to HTTP Request Smuggling (HRS).6.5Jul 14, 2022
• CVE-2022-32213The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly parse and validate Transfer-Encoding headers and can lead to HTTP Request Smuggling (HRS).6.5Jul 14, 2022
• CVE-2022-32215The llhttp parser <v14.20.1, <v16.17.1 and <v18.9.1 in the http module in Node.js does not correctly handle multi-line Transfer-Encoding headers. This can lead to HTTP Request Smuggling (HRS).6.5Jul 14, 2022
• CVE-2002-20001The Diffie-Hellman Key Agreement Protocol allows remote attackers (from the client side) to send arbitrary numbers that are actually not public keys, and trigger expensive server-side DHE modular-e...7.5Nov 11, 2021