CVE-2023-5970: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using…

PriorityP279high8.8CVSS 3.1

AVNACLPRLUINSUCHIHAH

ITWVulnCheck KEV

Exploited in the wild

EPSS

0.91%

55.5th percentile

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
sonicwall	sma100	—	—
sonicwall	sma_200_firmware	<= 10.2.1.9-57sv	—
sonicwall	sma_210_firmware	<= 10.2.1.9-57sv	—
sonicwall	sma_400_firmware	<= 10.2.1.9-57sv	—
sonicwall	sma_410_firmware	<= 10.2.1.9-57sv	—
sonicwall	sma_500v_firmware	<= 10.2.1.9-57sv	—

CVSS provenance

nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

vulncheck8.8HIGH

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.