Exploitation Summary
EIP tracks 3 public exploits for CVE-2023-27100. PoCs published by FabDotNET, DarokNET, fabdotnet.
AI-analyzed exploit summary This exploit bypasses the anti-brute force protection in pfSense CE <= 2.6.0 by manipulating the X-Forwarded-For header to avoid IP-based rate limiting. It performs a credential brute-force attack using provided username and password lists.
Description
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.
Exploits (3)
This exploit bypasses the anti-brute force protection in pfSense CE <= 2.6.0 by manipulating the X-Forwarded-For header to avoid IP-based rate limiting. It performs a credential brute-force attack using provided username and password lists.
The repository contains a functional Python script that exploits CVE-2023-27100, an anti-brute force protection bypass in pfSense CE <= 2.6.0. The exploit leverages the 'X-Forwarded-For' header to bypass authentication rate limits and performs a credential brute-force attack.
This repository contains a functional Python script that exploits CVE-2023-27100, an anti-brute force protection bypass in pfSense CE <= 2.6.0. The exploit leverages the 'X-Forwarded-For' header to bypass authentication rate limits and performs a credential brute-force attack.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H