Improper Authentication in SMA100 SSL-VPN by SonicWall

CVE-2023-5970

What is CVE-2023-5970?

The SMA100 SSL-VPN's virtual office portal is susceptible to an authentication flaw that allows a remote authenticated attacker to exploit this weakness. By using accented characters, the attacker can create an identical external domain user, leading to a potential bypass of multi-factor authentication (MFA). This vulnerability raises significant concerns regarding user identity protection and network security for affected users.

References