Authentication Bypass Vulnerability in Netgate pfSense Software
CVE-2023-27100
9.8CRITICAL
Key Information:
- Vendor
Netgate
- Status
- Vendor
- CVE Published:
- 22 March 2023
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2023-27100?
An improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus and pfSense CE software enables attackers to circumvent brute force protection mechanisms. This vulnerability can be exploited through specially crafted web requests, potentially allowing unauthorized access to network resources.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.