OpenCVE

A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.

No CVSS v4.0

Attack Vector Adjacent Network

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact partial

Vendors	Products
Stormshield	Stormshield Network Security

No data.

No data.

References

Link	Providers
https://advisories.stormshield.eu/2025-007/

History

Sat, 04 Jul 2026 02:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 02 Jul 2026 10:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Stormshield Stormshield stormshield Network Security
Vendors & Products		Stormshield Stormshield stormshield Network Security

Thu, 02 Jul 2026 09:45:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included) There is a possible leak of secret information if administration commands have been passed with the CLI command line tool. Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.
Title		Information leak in NSRPC client history
Weaknesses		CWE-532
References		https://advisories.stormshield.eu/2025-007/
Metrics		cvssV3_1 `{'score': 4.3, 'vector': 'CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N'}`

MITRE

Status: PUBLISHED

Assigner: airbus

Published: 2026-07-02T08:42:56.777Z

Updated: 2026-07-02T12:20:17.839Z

Reserved: 2026-05-13T14:04:22.661Z

Link: CVE-2026-8482

Vulnrichment

Updated: 2026-07-02T12:20:09.475Z

NVD

No data.

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-8482", "assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "state": "PUBLISHED", "assignerShortName": "airbus", "dateReserved": "2026-05-13T14:04:22.661Z", "datePublished": "2026-07-02T08:42:56.777Z", "dateUpdated": "2026-07-02T12:20:17.839Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "shortName": "airbus", "dateUpdated": "2026-07-02T08:42:56.777Z"}, "title": "Information leak in NSRPC client history", "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file", "type": "CWE"}]}], "affected": [{"vendor": "Stormshield", "product": "Stormshield Network Security", "versions": [{"status": "affected", "version": "4.3.0", "lessThanOrEqual": "4.3.41", "versionType": "semver"}, {"status": "affected", "version": "4.8.0", "lessThanOrEqual": "4.8.15", "versionType": "semver"}, {"status": "affected", "version": "5.0.0", "lessThanOrEqual": "5.0.5", "versionType": "semver"}], "defaultStatus": "unknown"}], "descriptions": [{"lang": "en", "value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n\nThere is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n\nSomeone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n<br>There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n<br>Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password. <br>"}]}], "references": [{"url": "https://advisories.stormshield.eu/2025-007/"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "ADJACENT_NETWORK", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "MEDIUM", "baseScore": 4.3, "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N"}}], "solutions": [{"lang": "en", "value": "The following updates fix this vulnerability:\n * SNS 5.0.6\n\n * SNS 4.8.16\n\n * SNS 4.3.42", "supportingMedia": [{"type": "text/html", "base64": false, "value": "The following updates fix this vulnerability:<br><ul><li>SNS 5.0.6\n</li><li>SNS 4.8.16\n</li><li>SNS 4.3.42</li></ul>"}]}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 1.0.2"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-02T12:20:06.574781Z", "id": "CVE-2026-8482", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-02T12:20:17.839Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-8482", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-02T12:20:06.574781Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-02T12:20:09.475Z"}}], "cna": {"title": "Information leak in NSRPC client history", "source": {"discovery": "UNKNOWN"}, "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:H/UI:R/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Stormshield", "product": "Stormshield Network Security", "versions": [{"status": "affected", "version": "4.3.0", "versionType": "semver", "lessThanOrEqual": "4.3.41"}, {"status": "affected", "version": "4.8.0", "versionType": "semver", "lessThanOrEqual": "4.8.15"}, {"status": "affected", "version": "5.0.0", "versionType": "semver", "lessThanOrEqual": "5.0.5"}], "defaultStatus": "unknown"}], "solutions": [{"lang": "en", "value": "The following updates fix this vulnerability:\n * SNS 5.0.6\n\n * SNS 4.8.16\n\n * SNS 4.3.42", "supportingMedia": [{"type": "text/html", "value": "The following updates fix this vulnerability:<br><ul><li>SNS 5.0.6\n</li><li>SNS 4.8.16\n</li><li>SNS 4.3.42</li></ul>", "base64": false}]}], "references": [{"url": "https://advisories.stormshield.eu/2025-007/"}], "x_generator": {"engine": "Vulnogram 1.0.2"}, "descriptions": [{"lang": "en", "value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n\nThere is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n\nSomeone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password.", "supportingMedia": [{"type": "text/html", "value": "A vulnerability was discovered on StormShield Network Security 4.3.0 to 4.3.41 (included), 4.8.0 to 4.8.15 (included) , 5.0.0 to 5.0.5 (included)\n<br>There is a possible leak of secret information if administration commands have been passed with the CLI command line tool.\n<br>Someone with SSH access to the firewall (if SSH multiuser mode is enabled) could possibly get the proxy CA passphrase or TPM password. <br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-532", "description": "CWE-532 Insertion of sensitive information into log file"}]}], "providerMetadata": {"orgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "shortName": "airbus", "dateUpdated": "2026-07-02T08:42:56.777Z"}}}, "cveMetadata": {"cveId": "CVE-2026-8482", "state": "PUBLISHED", "dateUpdated": "2026-07-02T12:20:17.839Z", "dateReserved": "2026-05-13T14:04:22.661Z", "assignerOrgId": "24a3c815-5f22-4d74-967a-30958d6466f4", "datePublished": "2026-07-02T08:42:56.777Z", "assignerShortName": "airbus"}, "dataVersion": "5.2"}