EUVD-2023-23388

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

SonicOS SSLVPN allows excessive MFA attempts by an authenticated attacker, posing security risks.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2023-1101	3 Mar 202300:34	–	circl
CNNVD	SonicWALL SonicOS 安全漏洞	2 Mar 202300:00	–	cnnvd
CVE	CVE-2023-1101	2 Mar 202300:00	–	cve
Cvelist	CVE-2023-1101	2 Mar 202300:00	–	cvelist
NVD	CVE-2023-1101	2 Mar 202322:15	–	nvd
OSV	CVE-2023-1101	2 Mar 202322:15	–	osv
Prion	Design/Logic Flaw	2 Mar 202322:15	–	prion
RedhatCVE	CVE-2023-1101	23 May 202502:58	–	redhatcve
SonicWall	SonicOS SSLVPN Improper Restriction of Excessive MFA Attempts Vulnerability	2 Mar 202317:32	–	sonicwall
Tenable Nessus	SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)	10 Mar 202300:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "71f9fd19-5e07-3a7e-85f8-3489402f9b82",
        "vendor": {
          "name": "SonicWall"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "1591daef-8768-314c-a419-c1ace72436a8",
        "product": {
          "name": "SonicOS"
        },
        "product_version": "SonicOS NSsp 7.0.1-5083 and earlier"
      },
      {
        "id": "4460988e-06b4-3e69-94ab-4589b8236c89",
        "product": {
          "name": "SonicOS"
        },
        "product_version": "SonicOS NSv 6.5.4.4-44v-21-1551 and earlier"
      },
      {
        "id": "5f8928dc-2d09-3f69-8db2-fc7e345c8c79",
        "product": {
          "name": "SonicOS"
        },
        "product_version": "SonicOS 7.0.1-5095 and earlier"
      },
      {
        "id": "f8b04693-37f1-39fe-a4ff-0733c7ed4181",
        "product": {
          "name": "SonicOS"
        },
        "product_version": "SonicOS 6.5.4.11-97n and earlier"
      }
    ]
  }
]

Source	Link
psirt	www.psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005

03 Oct 2025 20:07Current

6.1Medium risk

Vulners AI Score6.1

CVSS 3.18.8

EPSS0.0035

SSVC

sonicos sslvpn security vulnerability excessive mfa attempts authentication risks