CVE-2023-27152

2023-10-2321:15:08

Google

osv.dev

deciso opnsense

authentication

brute-force

vulnerability

software

7.1 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

43.2%

JSON

DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication.

CPENameOperatorVersion
coreeq23.1.b
coreeq15.1.12
coreeq21.1.b
coreeq18.7.r
coreeq18.1.b
coreeq21.7.r
coreeq22.1.b
coreeq15.1.10.2
coreeq19.1.b
coreeq15.1.7.1

Name	Operator	Version
core	eq	23.1.b
core	eq	15.1.12
core	eq	21.1.b
core	eq	18.7.r
core	eq	18.1.b
core	eq	21.7.r
core	eq	22.1.b
core	eq	15.1.10.2
core	eq	19.1.b
core	eq	15.1.7.1

Rows per page:

1-10 of 711

References

www.esecforte.com/cve-2023-27152-opnsense-brute-force/