CVE-2022-23746: High severity checkpoint ssl network extender vulnerability

Published Nov 30, 2022
·
Updated

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

Affected Software

190 affected components
Checkpoint Ssl Network Extender=r80.20
Checkpoint Ssl Network Extender=r80.20-take_10
Checkpoint Ssl Network Extender=r80.20-take_103
Checkpoint Ssl Network Extender=r80.20-take_117
Checkpoint Ssl Network Extender=r80.20-take_118
Checkpoint Ssl Network Extender=r80.20-take_127
Checkpoint Ssl Network Extender=r80.20-take_134
Checkpoint Ssl Network Extender=r80.20-take_135
Checkpoint Ssl Network Extender=r80.20-take_138
Checkpoint Ssl Network Extender=r80.20-take_141
Checkpoint Ssl Network Extender=r80.20-take_149
Checkpoint Ssl Network Extender=r80.20-take_155
Checkpoint Ssl Network Extender=r80.20-take_156
Checkpoint Ssl Network Extender=r80.20-take_160
Checkpoint Ssl Network Extender=r80.20-take_161
Checkpoint Ssl Network Extender=r80.20-take_17
Checkpoint Ssl Network Extender=r80.20-take_173
Checkpoint Ssl Network Extender=r80.20-take_183
Checkpoint Ssl Network Extender=r80.20-take_187
Checkpoint Ssl Network Extender=r80.20-take_188
Checkpoint Ssl Network Extender=r80.20-take_190
Checkpoint Ssl Network Extender=r80.20-take_202
Checkpoint Ssl Network Extender=r80.20-take_203
Checkpoint Ssl Network Extender=r80.20-take_205
Checkpoint Ssl Network Extender=r80.20-take_208
Checkpoint Ssl Network Extender=r80.20-take_210
Checkpoint Ssl Network Extender=r80.20-take_211
Checkpoint Ssl Network Extender=r80.20-take_220
Checkpoint Ssl Network Extender=r80.20-take_33
Checkpoint Ssl Network Extender=r80.20-take_42
Checkpoint Ssl Network Extender=r80.20-take_47
Checkpoint Ssl Network Extender=r80.20-take_73
Checkpoint Ssl Network Extender=r80.20-take_74
Checkpoint Ssl Network Extender=r80.20-take_80
Checkpoint Ssl Network Extender=r80.20-take_87
Checkpoint Ssl Network Extender=r80.20-take_91
Checkpoint Ssl Network Extender=r80.20sp
Checkpoint Ssl Network Extender=r80.20sp-take_105
Checkpoint Ssl Network Extender=r80.20sp-take_121
Checkpoint Ssl Network Extender=r80.20sp-take_163
Checkpoint Ssl Network Extender=r80.20sp-take_178
Checkpoint Ssl Network Extender=r80.20sp-take_191
Checkpoint Ssl Network Extender=r80.20sp-take_210
Checkpoint Ssl Network Extender=r80.20sp-take_240
Checkpoint Ssl Network Extender=r80.20sp-take_258
Checkpoint Ssl Network Extender=r80.20sp-take_266
Checkpoint Ssl Network Extender=r80.20sp-take_273
Checkpoint Ssl Network Extender=r80.20sp-take_279
Checkpoint Ssl Network Extender=r80.20sp-take_283
Checkpoint Ssl Network Extender=r80.20sp-take_295
Checkpoint Ssl Network Extender=r80.20sp-take_302
Checkpoint Ssl Network Extender=r80.20sp-take_304
Checkpoint Ssl Network Extender=r80.20sp-take_305
Checkpoint Ssl Network Extender=r80.20sp-take_306
Checkpoint Ssl Network Extender=r80.20sp-take_309
Checkpoint Ssl Network Extender=r80.20sp-take_310
Checkpoint Ssl Network Extender=r80.20sp-take_313
Checkpoint Ssl Network Extender=r80.20sp-take_314
Checkpoint Ssl Network Extender=r80.20sp-take_315
Checkpoint Ssl Network Extender=r80.20sp-take_317
Checkpoint Ssl Network Extender=r80.20sp-take_326
Checkpoint Ssl Network Extender=r80.20sp-take_327
Checkpoint Ssl Network Extender=r80.20sp-take_331
Checkpoint Ssl Network Extender=r80.20sp-take_332
Checkpoint Ssl Network Extender=r80.20sp-take_334
Checkpoint Ssl Network Extender=r80.20sp-take_335
Checkpoint Ssl Network Extender=r80.30
Checkpoint Ssl Network Extender=r80.30-take_107
Checkpoint Ssl Network Extender=r80.30-take_111
Checkpoint Ssl Network Extender=r80.30-take_135
Checkpoint Ssl Network Extender=r80.30-take_136
Checkpoint Ssl Network Extender=r80.30-take_140
Checkpoint Ssl Network Extender=r80.30-take_155
Checkpoint Ssl Network Extender=r80.30-take_163
Checkpoint Ssl Network Extender=r80.30-take_166
Checkpoint Ssl Network Extender=r80.30-take_168
Checkpoint Ssl Network Extender=r80.30-take_180
Checkpoint Ssl Network Extender=r80.30-take_19
Checkpoint Ssl Network Extender=r80.30-take_191
Checkpoint Ssl Network Extender=r80.30-take_195
Checkpoint Ssl Network Extender=r80.30-take_196
Checkpoint Ssl Network Extender=r80.30-take_210
Checkpoint Ssl Network Extender=r80.30-take_213
Checkpoint Ssl Network Extender=r80.30-take_214
Checkpoint Ssl Network Extender=r80.30-take_215
Checkpoint Ssl Network Extender=r80.30-take_217
Checkpoint Ssl Network Extender=r80.30-take_219
Checkpoint Ssl Network Extender=r80.30-take_221
Checkpoint Ssl Network Extender=r80.30-take_226
Checkpoint Ssl Network Extender=r80.30-take_227
Checkpoint Ssl Network Extender=r80.30-take_228
Checkpoint Ssl Network Extender=r80.30-take_232
Checkpoint Ssl Network Extender=r80.30-take_235
Checkpoint Ssl Network Extender=r80.30-take_236
Checkpoint Ssl Network Extender=r80.30-take_237
Checkpoint Ssl Network Extender=r80.30-take_241
Checkpoint Ssl Network Extender=r80.30-take_242
Checkpoint Ssl Network Extender=r80.30-take_245
Checkpoint Ssl Network Extender=r80.30-take_246
Checkpoint Ssl Network Extender=r80.30-take_251
Checkpoint Ssl Network Extender=r80.30-take_254
Checkpoint Ssl Network Extender=r80.30-take_50
Checkpoint Ssl Network Extender=r80.30-take_76
Checkpoint Ssl Network Extender=r80.30sp
Checkpoint Ssl Network Extender=r80.30sp-take_101
Checkpoint Ssl Network Extender=r80.30sp-take_31
Checkpoint Ssl Network Extender=r80.30sp-take_32
Checkpoint Ssl Network Extender=r80.30sp-take_45
Checkpoint Ssl Network Extender=r80.30sp-take_49
Checkpoint Ssl Network Extender=r80.30sp-take_56
Checkpoint Ssl Network Extender=r80.30sp-take_73
Checkpoint Ssl Network Extender=r80.30sp-take_75
Checkpoint Ssl Network Extender=r80.30sp-take_82
Checkpoint Ssl Network Extender=r80.30sp-take_97
Checkpoint Ssl Network Extender=r80.40
Checkpoint Ssl Network Extender=r80.40-take_100
Checkpoint Ssl Network Extender=r80.40-take_102
Checkpoint Ssl Network Extender=r80.40-take_114
Checkpoint Ssl Network Extender=r80.40-take_118
Checkpoint Ssl Network Extender=r80.40-take_119
Checkpoint Ssl Network Extender=r80.40-take_120
Checkpoint Ssl Network Extender=r80.40-take_121
Checkpoint Ssl Network Extender=r80.40-take_125
Checkpoint Ssl Network Extender=r80.40-take_126
Checkpoint Ssl Network Extender=r80.40-take_131
Checkpoint Ssl Network Extender=r80.40-take_138
Checkpoint Ssl Network Extender=r80.40-take_139
Checkpoint Ssl Network Extender=r80.40-take_150
Checkpoint Ssl Network Extender=r80.40-take_153
Checkpoint Ssl Network Extender=r80.40-take_154
Checkpoint Ssl Network Extender=r80.40-take_156
Checkpoint Ssl Network Extender=r80.40-take_158
Checkpoint Ssl Network Extender=r80.40-take_161
Checkpoint Ssl Network Extender=r80.40-take_172
Checkpoint Ssl Network Extender=r80.40-take_173
Checkpoint Ssl Network Extender=r80.40-take_25
Checkpoint Ssl Network Extender=r80.40-take_38
Checkpoint Ssl Network Extender=r80.40-take_45
Checkpoint Ssl Network Extender=r80.40-take_48
Checkpoint Ssl Network Extender=r80.40-take_53
Checkpoint Ssl Network Extender=r80.40-take_54
Checkpoint Ssl Network Extender=r80.40-take_55
Checkpoint Ssl Network Extender=r80.40-take_65
Checkpoint Ssl Network Extender=r80.40-take_67
Checkpoint Ssl Network Extender=r80.40-take_69
Checkpoint Ssl Network Extender=r80.40-take_74
Checkpoint Ssl Network Extender=r80.40-take_77
Checkpoint Ssl Network Extender=r80.40-take_78
Checkpoint Ssl Network Extender=r80.40-take_83
Checkpoint Ssl Network Extender=r80.40-take_87
Checkpoint Ssl Network Extender=r80.40-take_89
Checkpoint Ssl Network Extender=r80.40-take_91
Checkpoint Ssl Network Extender=r80.40-take_92
Checkpoint Ssl Network Extender=r80.40-take_93
Checkpoint Ssl Network Extender=r80.40-take_94
Checkpoint Ssl Network Extender=r81
Checkpoint Ssl Network Extender=r81-take_10
Checkpoint Ssl Network Extender=r81-take_11
Checkpoint Ssl Network Extender=r81-take_13
Checkpoint Ssl Network Extender=r81-take_17
Checkpoint Ssl Network Extender=r81-take_23
Checkpoint Ssl Network Extender=r81-take_25
Checkpoint Ssl Network Extender=r81-take_27
Checkpoint Ssl Network Extender=r81-take_29
Checkpoint Ssl Network Extender=r81-take_34
Checkpoint Ssl Network Extender=r81-take_36
Checkpoint Ssl Network Extender=r81-take_42
Checkpoint Ssl Network Extender=r81-take_44
Checkpoint Ssl Network Extender=r81-take_51
Checkpoint Ssl Network Extender=r81-take_56
Checkpoint Ssl Network Extender=r81-take_58
Checkpoint Ssl Network Extender=r81-take_60
Checkpoint Ssl Network Extender=r81-take_65
Checkpoint Ssl Network Extender=r81-take_68
Checkpoint Ssl Network Extender=r81-take_69
Checkpoint Ssl Network Extender=r81-take_72
Checkpoint Ssl Network Extender=r81-take_74
Checkpoint Ssl Network Extender=r81.10
Checkpoint Ssl Network Extender=r81.10-take_14
Checkpoint Ssl Network Extender=r81.10-take_22
Checkpoint Ssl Network Extender=r81.10-take_30
Checkpoint Ssl Network Extender=r81.10-take_38
Checkpoint Ssl Network Extender=r81.10-take_44
Checkpoint Ssl Network Extender=r81.10-take_45
Checkpoint Ssl Network Extender=r81.10-take_55
Checkpoint Ssl Network Extender=r81.10-take_61
Checkpoint Ssl Network Extender=r81.10-take_66
Checkpoint Ssl Network Extender=r81.10-take_75
Checkpoint Ssl Network Extender=r81.10-take_78
Checkpoint Ssl Network Extender=r81.10-take_9

Remediation

Patch Available

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271

Event History

Nov 30, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionWeakness

Frequently Asked Questions

1

What is the severity of CVE-2022-23746?

CVE-2022-23746 is considered a medium severity vulnerability due to its susceptibility to brute-force attacks.

2

How do I fix CVE-2022-23746?

To mitigate CVE-2022-23746, it's recommended to implement stronger authentication mechanisms beyond username/password, such as multi-factor authentication.

3

What systems are affected by CVE-2022-23746?

CVE-2022-23746 affects Check Point SSL Network Extender versions r80.20, r80.30, r80.40, and r81.

4

Can CVE-2022-23746 lead to unauthorized access?

Yes, if exploited, CVE-2022-23746 can allow attackers to gain unauthorized access through brute-force attempts on usernames and passwords.

5

Is there a patch available for CVE-2022-23746?

Yes, Check Point has released updates that address CVE-2022-23746 in the affected versions.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203