CVE-2023-5970

HIGH EXPLOITED

Sonicwall Sma 200 Firmware < 10.2.1.9-57sv - Authentication Bypass

Title source: rule

Description

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

References (1)

[Vendor Advisory] https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0018

Scores

CVSS v3 8.8

EPSS 0.0042

EPSS Percentile 61.4%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitation Intel

VulnCheck KEV 2025-10-23

Classification

CWE

CWE-287

Status published

Affected Products (5)

sonicwall/sma_200_firmware < 10.2.1.9-57sv

sonicwall/sma_210_firmware < 10.2.1.9-57sv

sonicwall/sma_400_firmware < 10.2.1.9-57sv

sonicwall/sma_410_firmware < 10.2.1.9-57sv

sonicwall/sma_500v_firmware < 10.2.1.9-57sv

Timeline

Published Dec 05, 2023

Tracked Since Feb 18, 2026