CVE Feed

    Dashboard / CVE / CVE-2022-23746

    CVE-2022-23746

    The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

    Published:Nov 30, 2022
    Last Modified:Apr 25, 2025
    EPS:Nov 30, 2022
    EPSS Score:0.00237
    CVSS Score:7.5

    Affected Products

    Vendor
    Checkpoint
    Product
    Ssl Network Extender

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High