Skip to content
Sign in
Not rated

CVE-2023-5970 Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create…

Description

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

Affected products and versions

Product Affected versions Fixed in
SMA100 Versions not published

Other CVEs of SMA100

The 26 CVEs of SMA100 →
CVE-2025-40603 A potential exposure of sensitive information in log files in SonicWall SMA100 Series appliances may allow a remote,… 4.5 Medium CVE-2025-32821 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN admin privileges can with admin… 7.1 High CVE-2025-32820 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges can inject a path traversal… 8.3 High CVE-2025-32819 A vulnerability in SMA100 allows a remote authenticated attacker with SSLVPN user privileges to bypass the path… 8.8 High
Track this CVE