Unrated severityNVD Advisory· Published Mar 22, 2023· Updated Feb 25, 2025

CVE-2023-27100

Description

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Netgate/SSHGuard component of pfSense Plus and pfSense CEdescription
Netgate/Pfsensellm-fuzzy
Range: v22.05.1 (pfSense Plus) / v2.6.0 (pfSense CE)

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.htmlmitre
docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.ascmitre
redmine.pfsense.org/issues/13574mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.008
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000