CVE-2023-5970: High severity sonicwall sma 200 vulnerability
Published Dec 5, 2023
·Updated
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
Affected Software
10 affected components
All of the following
SonicWall Sma 200 Firmware<=10.2.1.9-57sv
SonicWall SMA 200
All of the following
SonicWall Sma 210 Firmware<=10.2.1.9-57sv
SonicWall Sma 210
All of the following
SonicWall Sma 400 Firmware<=10.2.1.9-57sv
SonicWall Sma 400
All of the following
SonicWall Sma 410 Firmware<=10.2.1.9-57sv
SonicWall Sma 410
All of the following
SonicWall Sma 500v Firmware<=10.2.1.9-57sv
SonicWall Sma 500v
Event History
Dec 5, 2023
CVE Published
08:20 PM
Data Sourced
08:20 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-5970?
CVE-2023-5970 is classified as a medium severity vulnerability.
2
How do I fix CVE-2023-5970?
To mitigate CVE-2023-5970, upgrade your SonicWall SMA firmware to version above 10.2.1.9-57sv.
3
What types of attacks can CVE-2023-5970 facilitate?
CVE-2023-5970 can allow an attacker to bypass MFA by creating an identical external domain user using accent characters.
4
Which SonicWall products are affected by CVE-2023-5970?
CVE-2023-5970 affects SonicWall SMA 200, SMA 210, SMA 400, SMA 410, and SMA 500v firmware with specified versions.
5
Who can exploit CVE-2023-5970?
CVE-2023-5970 can be exploited by remote authenticated attackers with access to the SMA100 SSL-VPN virtual office portal.