Vulnerability Description
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Netgate | Pfsense Plus | 22.05.1 |
| Pfsense | Pfsense | 2.6.0 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.ht
- https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.ascVendor Advisory
- https://redmine.pfsense.org/issues/13574Issue TrackingPatchVendor Advisory
- http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.ht
- https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.ascVendor Advisory
- https://redmine.pfsense.org/issues/13574Issue TrackingPatchVendor Advisory
- https://packetstorm.news/files/id/171791
FAQ
What is CVE-2023-27100?
CVE-2023-27100 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force prot...
How severe is CVE-2023-27100?
CVE-2023-27100 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2023-27100?
Check the references section above for vendor advisories and patch information. Affected products include: Netgate Pfsense Plus, Pfsense Pfsense.