What the vulnerability does
01Description
Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
CVSS base score
—
Key dates
02Disclosure timeline
December 5, 2023
CVE published
August 2, 2024
Record updated
External resources
