CVE-2022-23746
HIGH
7.5
CVSS Score
Published: November 30, 2022 at 12:00 AM UTC
Updated: June 17, 2026 at 04:30 AM UTC
1 product affected across 1 vendorSSL Network Extender
Using Gateway & Management, IPsec VPN blade SNX portal. by N/A?
Get instant alerts when new vulnerabilities affect Gateway & Management, IPsec VPN blade SNX portal. - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH7.5
Exploit prediction
EPSS 0.6%
SSVC
No known exploit
Description
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.
Affected
Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.
v < 230r80.20r80.20 take_10r80.20 take_103r80.20 take_117r80.20 take_118r80.20 take_127r80.20 take_134r80.20 take_135r80.20 take_138r80.20 take_141r80.20 take_149r80.20 take_155r80.20 take_156r80.20 take_160r80.20 take_161r80.20 take_17r80.20 take_173r80.20 take_183r80.20 take_187r80.20 take_188r80.20 take_190r80.20 take_202r80.20 take_203r80.20 take_205r80.20 take_208r80.20 take_210r80.20 take_211r80.20 take_220r80.20 take_33r80.20 take_42r80.20 take_47r80.20 take_73r80.20 take_74r80.20 take_80r80.20 take_87r80.20 take_91r80.20spr80.20sp take_105r80.20sp take_121r80.20sp take_163r80.20sp take_178r80.20sp take_191r80.20sp take_210r80.20sp take_240r80.20sp take_258r80.20sp take_266r80.20sp take_273r80.20sp take_279r80.20sp take_283r80.20sp take_295r80.20sp take_302r80.20sp take_304r80.20sp take_305r80.20sp take_306r80.20sp take_309r80.20sp take_310r80.20sp take_313r80.20sp take_314r80.20sp take_315r80.20sp take_317r80.20sp take_326r80.20sp take_327r80.20sp take_331r80.20sp take_332r80.20sp take_334r80.20sp take_335r80.30r80.30 take_107r80.30 take_111r80.30 take_135r80.30 take_136r80.30 take_140r80.30 take_155r80.30 take_163r80.30 take_166r80.30 take_168r80.30 take_180r80.30 take_19r80.30 take_191r80.30 take_195r80.30 take_196r80.30 take_210r80.30 take_213r80.30 take_214r80.30 take_215r80.30 take_217r80.30 take_219r80.30 take_221r80.30 take_226r80.30 take_227r80.30 take_228r80.30 take_232r80.30 take_235r80.30 take_236r80.30 take_237r80.30 take_241r80.30 take_242r80.30 take_245r80.30 take_246r80.30 take_251r80.30 take_254r80.30 take_50r80.30 take_76r80.30spr80.30sp take_101r80.30sp take_31r80.30sp take_32r80.30sp take_45r80.30sp take_49r80.30sp take_56r80.30sp take_73r80.30sp take_75r80.30sp take_82r80.30sp take_97r80.40r80.40 take_100r80.40 take_102r80.40 take_114r80.40 take_118r80.40 take_119r80.40 take_120r80.40 take_121r80.40 take_125r80.40 take_126r80.40 take_131r80.40 take_138r80.40 take_139r80.40 take_150r80.40 take_153r80.40 take_154r80.40 take_156r80.40 take_158r80.40 take_161r80.40 take_172r80.40 take_173r80.40 take_25r80.40 take_38r80.40 take_45r80.40 take_48r80.40 take_53r80.40 take_54r80.40 take_55r80.40 take_65r80.40 take_67r80.40 take_69r80.40 take_74r80.40 take_77r80.40 take_78r80.40 take_83r80.40 take_87r80.40 take_89r80.40 take_91r80.40 take_92r80.40 take_93r80.40 take_94r81r81 take_10r81 take_11r81 take_13r81 take_17r81 take_23r81 take_25r81 take_27r81 take_29r81 take_34r81 take_36r81 take_42r81 take_44r81 take_51r81 take_56r81 take_58r81 take_60r81 take_65r81 take_68r81 take_69r81 take_72r81 take_74r81.10r81.10 take_14r81.10 take_22r81.10 take_30r81.10 take_38r81.10 take_44r81.10 take_45r81.10 take_55r81.10 take_61r81.10 take_66r81.10 take_75r81.10 take_78r81.10 take_9
Affected range stops below 230, so it looks safe — our inference, not a vendor statement
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
Patch and advisory references
References (1)
MitigationPatchVendor Advisory
Source: [email protected]
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271SSVC — Action Prioritization
SSVCNo known exploitAutomatablePartial impact
SSVC signals action urgency (what to patch first), separate from CVSS which measures severity.
CVSS
7.5HIGHCISA-ADP
- Attack Vector
- NETWORK
- Complexity
- LOW
- Privileges
- NONE
- User Interaction
- NONE
- Scope
- UNCHANGED
- Confidentiality
- HIGH
- Integrity
- NONE
- Availability
- NONE
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-307
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card