CVE-2023-41166

Summary

CVE-2023-41166 is a vulnerability affecting multiple versions of Stormshield Network Security (SNS), including 3.7.0-3.7.39, 3.11.0-3.11.27, 4.3.0-4.3.22, 4.6.0-4.6.9, and 4.7.0-4.7.1. This issue enables an attacker to determine if a specific user account exists on an SNS firewall through remote access commands, posing a potential security risk. The vulnerability has been identified and affected users are urged to apply the necessary patches to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.