Description

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Related CPE's

o

sonicwall

sonicos

4

h

sonicwall

nsa_2700

-

h

sonicwall

nsa_3700

-

h

sonicwall

nsa_4700

-

h

sonicwall

nsa_5700

-

h

sonicwall

nsa_6700

-

h

sonicwall

nssp_10700

-

h

sonicwall

nssp_11700

-

h

sonicwall

nssp_13700

-

h

sonicwall

nsv_270

-

h

sonicwall

nsv_470

-

h

sonicwall

nsv_870

-

h

sonicwall

tz270

-

h

sonicwall

tz270w

-

h

sonicwall

tz370

-

h

sonicwall

tz370w

-

h

sonicwall

tz470

-

h

sonicwall

tz470w

-

h

sonicwall

tz570

-

h

sonicwall

tz570p

-

h

sonicwall

tz570w

-

h

sonicwall

tz670

-

h

sonicwall

nssp_15700

-

h

sonicwall

nsv_10

-

h

sonicwall

nsv_100

-

h

sonicwall

nsv_1600

-

h

sonicwall

nsv_200

-

h

sonicwall

nsv_25

-

h

sonicwall

nsv_300

-

h

sonicwall

nsv_400

-

h

sonicwall

nsv_50

-

h

sonicwall

nsv_800

-

h

sonicwall

nsa_2600

-

h

sonicwall

nsa_2650

-

h

sonicwall

nsa_3600

-

h

sonicwall

nsa_3650

-

h

sonicwall

nsa_4600

-

h

sonicwall

nsa_4650

-

h

sonicwall

nsa_5600

-

h

sonicwall

nsa_5650

-

h

sonicwall

nsa_6600

-

h

sonicwall

nsa_6650

-

h

sonicwall

nsa_9250

-

h

sonicwall

nsa_9450

-

h

sonicwall

nsa_9650

-

h

sonicwall

nssp12400

-

h

sonicwall

nssp12800

-

h

sonicwall

sm10200

-

h

sonicwall

sm10400

-

h

sonicwall

sm10800

-

h

sonicwall

sm9200

-

h

sonicwall

sm9400

-

h

sonicwall

sm9600

-

h

sonicwall

sm9800

-

h

sonicwall

soho_250

-

h

sonicwall

soho_250w

-

h

sonicwall

sohow

-

h

sonicwall

tz300

-

h

sonicwall

tz300p

-

h

sonicwall

tz300w

-

h

sonicwall

tz350

-

h

sonicwall

tz350w

-

h

sonicwall

tz400

-

h

sonicwall

tz400w

-

h

sonicwall

tz500

-

h

sonicwall

tz500w

-

h

sonicwall

tz600

-

h

sonicwall

tz600p

-

References

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005

Vendor Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005

Vendor Advisory

Weaknesses

[email protected]

Primary
CWE-307

[email protected]

Secondary
CWE-307

134c704f-9b21-4f2e-91b3-4a467353bcc0

Primary
CWE-307

CVSS impact metrics

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.8 · High

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-03-02T22:15:09.560

2 years ago

Last modified

2025-03-07T20:15:36.463

2 months ago