CVE-2025-48707
Published Sep 25, 2025
·Updated
An issue was discovered in Stormshield Network Security (SNS) before 5.0.1. TPM authentication information could, in some HA use cases, be shared among administrators, which can cause secret sharing.
Affected Software
2 affected components
Stormshield Network Security (SNS)<5.0.1
Stormshield Stormshield Network Security<5.0.1
Event History
Sep 25, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-48707?
CVE-2025-48707 is classified as a medium severity vulnerability due to potential information exposure in TPM authentication.
2
How do I fix CVE-2025-48707?
To remediate CVE-2025-48707, upgrade Stormshield Network Security (SNS) to version 5.0.1 or later.
3
What are the potential impacts of CVE-2025-48707?
CVE-2025-48707 can lead to unauthorized access to TPM authentication information among administrators in certain HA use cases.
4
Which versions of Stormshield Network Security are affected by CVE-2025-48707?
CVE-2025-48707 affects Stormshield Network Security (SNS) versions prior to 5.0.1.
5
Who is affected by CVE-2025-48707?
Administrators using versions of Stormshield Network Security (SNS) before 5.0.1 may be affected by CVE-2025-48707.