high8.8
CVE-2023-5970
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using ac…
Impact
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sonicwall | Sma 200 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 210 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 400 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 410 Firmware | through 10.2.1.9-57sv |
| Sonicwall | Sma 500v Firmware | through 10.2.1.9-57sv |