Description
An Improper Authentication vulnerability in the SSLVPN authentication mechanism allows a remote attacker to bypass authentication.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
High
Affected products
- SonicWall / SonicOS7.1.1-7058 and older versions – 7.1.1-7058 and older versions
- SonicWall / SonicOS7.1.2-7019 – 7.1.2-7019
- SonicWall / SonicOS8.0.0-8035 – 8.0.0-8035
- SonicWall / SonicOS7.1.1-7040 – 7.1.1-7058
- SonicWall / SonicOS7.1.2-7019 – 7.1.2-7019
- SonicWall / SonicOS8.0.0-8035 – 8.0.0-8035
Exploits & proofs of concept
- nucleiSSL VPN Session Hijackingby johnk3r
References
Updated 44m ago · 8 sources