Lucene search

[email protected]CVE-2023-5970

HistoryDec 05, 2023 - 9:15 p.m.

CVE-2023-5970

2023-12-0521:15:07

CWE-287

[email protected]

web.nvd.nist.gov

cve-2023-5970

improper authentication

sma100

ssl-vpn

mfa bypass

nvd

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

Affected configurations

NVD

Node

sonicwallsma_200_firmwareRange≤10.2.1.9-57sv

AND

sonicwallsma_200Match-

Node

sonicwallsma_210_firmwareRange≤10.2.1.9-57sv

AND

sonicwallsma_210Match-

Node

sonicwallsma_400_firmwareRange≤10.2.1.9-57sv

AND

sonicwallsma_400Match-

Node

sonicwallsma_410_firmwareRange≤10.2.1.9-57sv

AND

sonicwallsma_410Match-

Node

sonicwallsma_500v_firmwareRange≤10.2.1.9-57sv

AND

sonicwallsma_500vMatch-

CPENameOperatorVersion
sonicwall:sma_200_firmwaresonicwall sma 200 firmwarele10.2.1.9-57sv

CPE	Name	Operator	Version
sonicwall:sma_200_firmware	sonicwall sma 200 firmware	le	10.2.1.9-57sv

CNA Affected

[
  {
    "defaultStatus": "unknown",
    "platforms": [
      "SMA 200",
      "SMA 210",
      "SMA 400",
      "SMA 410",
      "SMA 500v"
    ],
    "product": "SMA100",
    "vendor": "SonicWall",
    "versions": [
      {
        "status": "affected",
        "version": "10.2.1.9-57sv and earlier versions"
      }
    ]
  }
]

References

psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.1%

JSON

Related for CVE-2023-5970

prion1 cvelist1 nvd1