Vulnerability in Stormshield SSL Vpn Client
CVE-2022-46783
An issue was discovered in Stormshield SSL VPN Client before 3.2.0. If multiple address books are used, an attacker may be able to access the other encrypted address book.
EPSS: 0.002 (15.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Stormshield Ssl_vpn_client
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (Vendor Advisory)
- cve@mitre.org (Vendor Advisory)
Frequently asked questions
- What is CVE-2022-46783?
- CVE-2022-46783 is a medium-severity vulnerability in Stormshield SSL Vpn Client, classified under Inadequate Encryption Strength. CVSS score: 5.3/10. Published 2023-08-28.
- How severe is CVE-2022-46783?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2022-46783 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.