← Back to vendor leaderboard
Stormshield
Vendor
Primary Scores
Original
78
Score breakdown
EXPLAINABILITY (x1)
45
EXPLOITABILITY (x3)
100
REMEDIABILITY (x3)
97
SEVERITY (x2)
33
Good
What these primary scores mean
Original?
Uses the scoring scheme devised during Phase I of the NCT SBIR.
Sub-Scores
Default Credentials
94

Score: 93.85665529010238 293 product(s) evaluated. 18 instance(s) of default credentials found.

Explainability
45

The average Flesch-Kincaid readability score for the descriptions included with the 59 CVE(s) associated with this vendor is 45.075752513340156. This means these descriptions are difficult to read.

Exploitability
100

This vendor has 0 KEV(s) out of 59 CVEs(s).

MFA
97

MFA support was confirmed at https://www.stormshield.com/products-services/products/network-security/firmware/ with 97% classifier confidence.

Physical Tamper
95

0 of the 59 CVE(s) associated with this vendor involve physical access (CVSS attack vector PHYSICAL or a physical-tamper CWE).

Remediability
97

Of the 59 CVE(s) associated with this vendor, 57 CVE(s) include(s) a tag indicating the CVE is remediable.

Secure Boot
83

Explanation Of This Score

Evidence for Supported

"SNxr1200 | Disabled by default | To check whether Secure Boot is enabled on the SNS firewall, run the following command in a CLI console: SYSTEM PROPERTY If SecureBoot=1 appears in the result, this means that the feature is enabled, while SecureBoot=0 means it is disabled." Found in: Source Confidence: 0.813 "If Secure Boot is enabled by default on the SNS firewall, we recommend protecting access to the UEFI's control panel as soon as possible." Found in: Source Confidence: 0.806

Evidence for Not Supported

Severity
33

The average CVSS score of the 59 CVE(s) associated with this vendor is 33.118644067796595.

What these sub-scores mean
Default Credentials?
Based solely on evidence of default credentials and whether users must change them.
Explainability?
Based solely on how clearly vulnerability disclosures are written.
Exploitability?
Based solely on how often known vulnerabilities have been actively exploited.
MFA?
Based solely on evidence of multi-factor authentication in the vendor's products.
Physical Tamper?
Based solely on the proportion of known vulnerabilities involving physical access.
Remediability?
Based solely on how readily vulnerabilities can be patched or mitigated.
Secure Boot?
Based solely on evidence of secure boot support in the vendor's products.
Severity?
Based solely on the average severity of known vulnerabilities.

  • Contact

  • 845 15th Street #320, San Diego, CA 92101-8046
  • +1 (650) 515-3391
  • salesinquiry@objectsecurity.com

ObjectSecurity LLC © 2026