Skip to content
OpenAdvisories
High · 8.8 CVE-2023-1101 EUVD-2023-23388GHSA-5whf-hr56-xhrf

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Published Mar 2, 2023 · Updated Mar 7, 2025 · Assigned by sonicwall

Vendor: SonicWall Product: SonicOS Category: Network devices

Description

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Affected products

VendorProductAffectedFixed
SonicWall SonicOS SonicOS 6.5.4.11-97n and earlier, SonicOS NSv 6.5.4.4-44v-21-1551 and earlier, SonicOS NSsp 7.0.1-5083 and earlier, SonicOS 7.0.1-5095 and earlier —

Advisories 1

References