CVE-2023-27100: Critical severity pfsense plus vulnerability
Published Mar 22, 2023
·Updated
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.
Affected Software
2 affected components
Netgate pfSense Plus=22.05.1
pfSense pfSense=2.6.0
Remediation
Patch Available
Event History
Mar 22, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID is CVE-2023-27100.
2
What is the title of this vulnerability?
The title of this vulnerability is "Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0."
3
What is the severity of CVE-2023-27100?
The severity of CVE-2023-27100 is critical with a CVSS score of 9.8.
4
Which software versions are affected by this vulnerability?
Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 are affected by this vulnerability.
5
How can attackers bypass the brute force protection mechanisms?
Attackers can bypass the brute force protection mechanisms by using crafted web requests.