← Database

CVE-2022-23746

HIGH CVSS: 7.5 Published: 2022-11-30 Modified: 2026-06-17

Description

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

Affected Platforms

Checkpoint Ssl Network Extender

Weakness Type

CWE-307, CWE-307

References