CVE-2022-23746

CVE-2022-23746

Vendor N/A
Product Gateway & Management, IPsec VPN blade SNX portal.
Weakness CWE-307 · Brute force
Published November 30, 2022
Last update April 25, 2025
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

Key dates

02Disclosure timeline

November 30, 2022 CVE published
April 25, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2023-48276 WordPress WP Forms Puzzle Captcha plugin <= 4.1 - Captcha Bypass vulnerability CVE-2023-35039 WordPress Password Reset with Code for WordPress REST API Plugin <= 0.0.15 is vulnerable to Broken Authentication CVE-2024-0787 Improper Restriction of Excessive Authentication Attempts in phpipam/phpipam CVE-2025-6004 Vault Userpass and LDAP User Lockout Bypass CVE-2026-34505 OpenClaw < 2026.3.12 - Webhook Rate Limiting Bypass via Pre-Authentication Secret Validation