high7.5
CVE-2022-23746
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX).
Impact
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Checkpoint | Ssl Network Extender | Versions r80.20, r80.20sp, r80.30, r80.30sp, r80.40, r81 |