CVE-2023-1101

Published Mar 2, 2023 CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Description
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-23388 SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.
History
Type Values Removed Values Added
CPEs cpe:2.3:h:sonicwall:nsv_100:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_10:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_1600:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_200:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_25:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_300:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_400:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_50:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_800:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
sonicwall
Published
Updated
Mar 7, 2025, 7:19 PM
Reserved
Feb 28, 2023, 12:00 AM
Status
Modified
Published
Mar 2, 2023, 10:15 PM
Modified
Nov 9, 2026, 2:43 PM