Description
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.
Published: 2023-03-02
Score: 8.8 High
EPSS: < 1% Very Low
KEV: No
AI Analysis

Analysis and contextual insights are available on OpenCVE Cloud.

Remediation

No solution or workaround provided in the CVE record.

Additional remediation guidance may be available on OpenCVE Cloud.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2023-23388 SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.
History

Mon, 09 Nov 2026 15:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:h:sonicwall:nsv_100:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_10:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_1600:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_200:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_25:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_270:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_300:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_400:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_470:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_50:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_800:-:*:*:*:*:*:*:*
cpe:2.3:h:sonicwall:nsv_870:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_100:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_10:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_1600:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_200:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_25:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_270:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_300:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_400:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_470:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_50:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_800:-:*:*:*:*:*:*:*
cpe:2.3:a:sonicwall:nsv_870:-:*:*:*:*:*:*:*

Fri, 07 Mar 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


cve-icon MITRE

Status: PUBLISHED

Assigner: sonicwall

Published:

Updated: 2025-03-07T19:19:56.993Z

Reserved: 2023-02-28T00:00:00.000Z

Link: CVE-2023-1101

cve-icon Vulnrichment

Updated: 2024-08-02T05:32:46.405Z

cve-icon NVD

Status : Modified

Published: 2023-03-02T22:15:09.560

Modified: 2026-11-09T14:43:41.437

Link: CVE-2023-1101

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses