What the vulnerability does
01Description
SonicOS SSLVPN improper restriction of excessive MFA attempts vulnerability allows an authenticated attacker to use excessive MFA codes.
CVSS base score
—
Key dates
02Disclosure timeline
March 2, 2023
CVE published
March 7, 2025
Record updated
External resources
03References
Related vulnerabilities
04Related CVE
CVE-2025-10658 SupportCandy – Helpdesk & Customer Support Ticket System <= 3.3.7 - Authentication Bypass to Support Session Takeover
CVE-2025-2415 OTP Bypass in Akinsoft's MyRezzta
CVE-2017-15887
CVE-2026-31903 IGL-Technologies eParking.fi Improper Restriction of Excessive Authentication Attempts
CVE-2018-14657
