cve.bz

CVE-2023-27100

9.8 criticalEPSS 9.8%

Critical (9.8). EPSS 9.8% chance of exploitation in the next 30 days.

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

Severity

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
9.8% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
CWE
CWE-307
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON