CVE-2022-30279

An issue was discovered in Stormshield Network Security (SNS) 4.3.x before 4.3.8. The event logging of the ASQ sofbus lacbus plugin triggers the dereferencing of a NULL pointer, leading to a crash of SNS. An attacker could exploit this vulnerability via forged sofbus lacbus traffic to cause a firmware crash.

• CWE-476

• https://advisories.stormshield.eu/2022-015Vendor Advisory
• https://advisories.stormshield.eu/2022-015Vendor Advisory

Published

May 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-30273The Motorola MDLC protocol through 2022-05-02 mishandles mes…9.8
• CVE-2022-30274The Motorola ACE1000 RTU through 2022-05-02 uses ECB encrypt…9.8
• CVE-2022-30275The Motorola MOSCAD Toolbox software through 2022-05-02 reli…7.5
• CVE-2022-30276The Motorola MOSCAD and ACE line of RTUs through 2022-05-02 …7.5
• CVE-2022-30277BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an …5.7
• CVE-2022-30278A vulnerability in Black Duck Hub’s embedded MadCap Flare do…6.1
• CVE-2022-3028A race condition was found in the Linux kernel's IP framewor…7
• CVE-2022-30280/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 a…8.8
• CVE-2022-30283In UsbCoreDxe, tampering with the contents of the USB workin…7.5
• CVE-2022-30284In the python-libnmap package through 0.7.2 for Python, remo…9.8
• CVE-2022-30285In Quest KACE Systems Management Appliance (SMA) through 12.…9.8
• CVE-2022-30286pyscriptjs (aka PyScript Demonstrator) in PyScript through 2…7.5