CVE-2021-28127

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

An issue was discovered in Stormshield SNS through 4.2.1. A brute-force attack can occur.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-307

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jul 1, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-281288.1In Strapi through 3.6.0, the admin panel allows the changing of one's own password without entering the current password. An attacker who gaCVE-2021-281297.8While working on Apache OpenOffice 4.1.8 a developer discovered that the DEB package did not install using root, but instead used a userid aCVE-2021-281307.8Dr.Web Firewall 12.5.2.4160 on Windows incorrectly restricts applications signed by Dr.Web. A DLL for a custom payload within a legitimate bCVE-2021-281317.5Impala sessions use a 16 byte secret to verify that the session is not being hijacked by another user. However, these secrets appear in the CVE-2021-281329.8LUCY Security Awareness Software through 4.7.x allows unauthenticated remote code execution because the Migration Tool (in the Support sectiCVE-2021-281334.3Zoom through 5.5.4 sometimes allows attackers to read private information on a participant's screen, even though the participant never attemCVE-2021-281349.8Clipper before 1.0.5 allows remote command execution. A remote attacker may send a crafted IPC message to the exposed vulnerable ipcRendererCVE-2021-281356.5The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of continuous unsolicited LCVE-2021-281366.5The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly handle the reception of multiple LMP IO CapabiliCVE-2021-281398.8The Bluetooth Classic implementation in Espressif ESP-IDF 4.4 and earlier does not properly restrict the Feature Page upon reception of an LCVE-2021-281419.8An issue was discovered in Progress Telerik UI for ASP.NET AJAX 2021.1.224. It allows unauthorized access to MicrosoftAjax.js through the TeCVE-2021-281428.8CITSmart before 9.1.2.28 mishandles the "filtro de autocomplete."
CVE-2021-28127: High severity, CVSS 7.5 | Vulnix