CVE-2023-27100
48Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 9.8epss 9.8%
from disclosure to weapon16 days
Published on NVDMar 22
1st PoC+16d
exploitation probability
9.8%top 5% of all CVEs
observed exploitation
nono source reports it
5 public exploit(s)
Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 5
exploitdbwww.exploit-db.com/exploits/51352unverifiedgithubgithub.com/DarokNET/CVE-2023-27100★ 2githubgithub.com/fabdotnet/CVE-2023-27100★ 0cve_referencepacketstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.htmlunverifiedcve_referencepacketstorm.news/files/id/171791unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.