CVE-2023-1101

Published: Mar 2, 2023Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.

Affected (4)

Products: Sonicwall: Sonicos

1 product

Configuration A

1 vulnerable · 21 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Before 7.0.1-5111

Running on/with	Platform Versions
Sonicwall Nsa 2700	All versions
Sonicwall Nsa 3700	All versions
Sonicwall Nsa 4700	All versions
Sonicwall Nsa 5700	All versions
Sonicwall Nsa 6700	All versions
Sonicwall Nssp 10700	All versions
Sonicwall Nssp 11700	All versions
Sonicwall Nssp 13700	All versions
Sonicwall Nsv 270	All versions
Sonicwall Nsv 470	All versions
Sonicwall Nsv 870	All versions
Sonicwall Tz270	All versions
Sonicwall Tz270w	All versions
Sonicwall Tz370	All versions
Sonicwall Tz370w	All versions
Sonicwall Tz470	All versions
Sonicwall Tz470w	All versions
Sonicwall Tz570	All versions
Sonicwall Tz570p	All versions
Sonicwall Tz570w	All versions
Sonicwall Tz670	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Up to 7.0.1-5083

Running on/with	Platform Versions
Sonicwall Nssp 15700	All versions

Configuration C

1 vulnerable · 9 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Up to 6.5.4.4-44v-21-1551

Running on/with	Platform Versions
Sonicwall Nsv 10	All versions
Sonicwall Nsv 100	All versions
Sonicwall Nsv 1600	All versions
Sonicwall Nsv 200	All versions
Sonicwall Nsv 25	All versions
Sonicwall Nsv 300	All versions
Sonicwall Nsv 400	All versions
Sonicwall Nsv 50	All versions
Sonicwall Nsv 800	All versions

Configuration D

1 vulnerable · 36 platform

Vulnerable Software	Affected Versions
Sonicwall Sonicos	Up to 6.5.4.11-97n

Running on/with	Platform Versions
Sonicwall Nsa 2600	All versions
Sonicwall Nsa 2650	All versions
Sonicwall Nsa 3600	All versions
Sonicwall Nsa 3650	All versions
Sonicwall Nsa 4600	All versions
Sonicwall Nsa 4650	All versions
Sonicwall Nsa 5600	All versions
Sonicwall Nsa 5650	All versions
Sonicwall Nsa 6600	All versions
Sonicwall Nsa 6650	All versions
Sonicwall Nsa 9250	All versions
Sonicwall Nsa 9450	All versions
Sonicwall Nsa 9650	All versions
Sonicwall Nssp12400	All versions
Sonicwall Nssp12800	All versions
Sonicwall Sm10200	All versions
Sonicwall Sm10400	All versions
Sonicwall Sm10800	All versions
Sonicwall Sm9200	All versions
Sonicwall Sm9400	All versions
Sonicwall Sm9600	All versions
Sonicwall Sm9800	All versions
Sonicwall Soho 250	All versions
Sonicwall Soho 250w	All versions
Sonicwall Sohow	All versions
Sonicwall Tz300	All versions
Sonicwall Tz300p	All versions
Sonicwall Tz300w	All versions
Sonicwall Tz350	All versions
Sonicwall Tz350w	All versions
Sonicwall Tz400	All versions
Sonicwall Tz400w	All versions
Sonicwall Tz500	All versions
Sonicwall Tz500w	All versions
Sonicwall Tz600	All versions
Sonicwall Tz600p	All versions

Related CWEs

Improper Restriction of Excessive Authentication Attempts

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.

References (2)

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005

Source: PSIRT@sonicwall.com

Vendor Advisory

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0005

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.