1. Home
  2. CVE Database
  3. CVE-2023-1101
HIGH · 8.8

CVE-2023-1101

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Vulnerability Description

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
SonicwallSonicos< 7.0.1-5111
SonicwallNsa 2700-
SonicwallNsa 3700-
SonicwallNsa 4700-
SonicwallNsa 5700-
SonicwallNsa 6700-
SonicwallNssp 10700-
SonicwallNssp 11700-
SonicwallNssp 13700-
SonicwallNsv 270-
SonicwallNsv 470-
SonicwallNsv 870-
SonicwallTz270-
SonicwallTz270W-
SonicwallTz370-
SonicwallTz370W-
SonicwallTz470-
SonicwallTz470W-
SonicwallTz570-
SonicwallTz570P-

Related Weaknesses (CWE)

CWE-307

References

FAQ

What is CVE-2023-1101?

CVE-2023-1101 is a vulnerability with a CVSS score of 8.8 (HIGH). SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

How severe is CVE-2023-1101?

CVE-2023-1101 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-1101?

Check the references section above for vendor advisories and patch information. Affected products include: Sonicwall Sonicos, Sonicwall Nsa 2700, Sonicwall Nsa 3700, Sonicwall Nsa 4700, Sonicwall Nsa 5700.