CVE-2023-27100 — n/a / n/a

Description (CNA)

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

Affected (CNA)

Vendor / product	Versions
n/a / n/a	affected n/a

CWE

No CWE identifiers supplied.

References

https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc
https://redmine.pfsense.org/issues/13574
http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html

ADP enrichment

CVE

No English description supplied.

https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc
https://redmine.pfsense.org/issues/13574
http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html

CISA-ADP

No English description supplied.

https://packetstorm.news/files/id/171791