Skip to content
OpenAdvisories
High · 7.5 CVE-2022-23746 EUVD-2022-28682GHSA-pvwr-rgwj-ff8v

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured f…

Published Nov 30, 2022 · Updated Apr 25, 2025 · Assigned by checkpoint

Description

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

Affected products

VendorProductAffectedFixed
— Gateway & Management, IPsec VPN blade SNX portal. R81.10 before take 79, R81 before take 77, R80.40 before take 180, R80.30 before take 255, R80.20 before 230 —

References