CVE-2022-23746

7.5 highEPSS 0.6%

High (7.5) in checkpoint ssl network extender. EPSS 0.6% chance of exploitation in the next 30 days.

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
CWE: CWE-307
Published: 2022-11-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

checkpoint:ssl_network_extender

References

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271

Check your stack JSON