Critical severity · published Mar 22, 2023
CVE-2023-27100
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to…
9.8
CVSS
9.8%
EPSS
No
On KEV
Description
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)9.8% · higher than 96% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PF
Pfsense · Pfsense
2.6.0 · source: NVD
PP
Pfsense Plus · Netgate
22.05.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-27100
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-27100
packetstormsecurity.com
http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html
Vendor Advisory
https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc
Issue Tracking
https://redmine.pfsense.org/issues/13574
packetstorm.news
https://packetstorm.news/files/id/171791
More from Pfsense Plus
8.8
CVE-2024-54780
Netgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to improper sanitization of…
8.8
CVE-2023-48123
An issue in Netgate pfSense Plus v.23.05.1 and before and pfSense CE v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the packet_capture.php…
8.8
CVE-2023-42326
An issue in Netgate pfSense v.2.7.0 allows a remote attacker to execute arbitrary code via a crafted request to the interfaces_gif_edit.php and interfaces_gre_edit.php components
8.8
CVE-2022-26019
Improper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a…
8.8
CVE-2022-24299
Improper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions prior to 22.01) allows a…