Unscored CVE-2023-27152 EUVD-2023-30935GHSA-c359-g3mh-v8vw

DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentic…

Published Oct 23, 2023 · Updated Sep 11, 2024 · Assigned by mitre

Description

DECISO OPNsense 23.1 does not impose rate limits for authentication, allowing attackers to perform a brute-force attack to bypass authentication.

Advisories 1

WID-SEC-2023-2728 OPNsense: Schwachstelle ermöglicht Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Oct 23, 2023

References

https://www.esecforte.com/cve-2023-27152-opnsense-brute-force/