Authentication flaw

2022-11-3019:15:00

PRIOn knowledge base

www.prio-n.com

ipsec vpn

ssl network extender

brute-force attack

usernames

passwords

0.002 Low

EPSS

Percentile

51.5%

JSON

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

CPENameOperatorVersion
ssl_network_extendereqr81.10 take-9
ssl_network_extendereqr81.10 take-14
ssl_network_extendereqr81.10 take-22
ssl_network_extendereqr81.10 take-30
ssl_network_extendereqr81.10 take-38
ssl_network_extendereqr81.10 take-44
ssl_network_extendereqr81.10 take-45
ssl_network_extendereqr81.10 take-55
ssl_network_extendereqr81.10 take-61
ssl_network_extendereqr81.10 take-66

Name	Operator	Version
ssl_network_extender	eq	r81.10 take-9
ssl_network_extender	eq	r81.10 take-14
ssl_network_extender	eq	r81.10 take-22
ssl_network_extender	eq	r81.10 take-30
ssl_network_extender	eq	r81.10 take-38
ssl_network_extender	eq	r81.10 take-44
ssl_network_extender	eq	r81.10 take-45
ssl_network_extender	eq	r81.10 take-55
ssl_network_extender	eq	r81.10 take-61
ssl_network_extender	eq	r81.10 take-66