PT-2023-32452 · Sonicwall · Sma100 Ssl-Vpn

Published 2023-12-05 · Updated 2023-12-13 · CVE-2023-5970

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SMA100 SSL-VPN virtual office portal (affected versions not specified)

Description The issue is related to improper authentication in the SMA100 SSL-VPN virtual office portal. This allows a remote authenticated attacker to create an identical external domain user using accent characters, which can result in a multi-factor authentication (MFA) bypass.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2023-5970

Affected Products

Sma100 Ssl-Vpn

References · 8

• https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-5970 · Security Note
• https://osv.dev/vulnerability/CVE-2023-5970 · Vendor Advisory
• https://t.me/cvenotify/62409 · Telegram Post
• https://t.me/cvenotify/62510 · Telegram Post
• https://twitter.com/CVEnew/status/1732137289399009298 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1732180880519467477 · Twitter Post
• https://t.me/cvenotify/63480 · Telegram Post