CVE-2023-5970CWE-287

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using…

published December 5, 2023

CVSS
—
EPSS
1%
Percentile
59.6
In the wild
Unconfirmed
What it is

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00911 · 59.6th percentile
Weakness
CWE-287 · Improper Authentication
Published
2023-12-05T20:20Z
EPSS history
Timeline
  • 05 DEC 20:20Z
    Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using…
    cvelistv5