CVE-2022-23746

CVSS V2 None CVSS V3 None
Description
The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.
Overview
  • CVE ID
  • CVE-2022-23746
  • Assigner
  • cve@checkpoint.com
  • Vulnerability Status
  • Analyzed
  • Published Version
  • 2022-11-30T19:15:10.310
  • Last Modified Date
  • 2022-12-06T15:49:50.240
Weakness Enumerations
CWE URL
CWE-307 http://cwe.mitre.org/data/definitions/307.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_10:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_103:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_117:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_118:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_127:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_134:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_135:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_138:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_141:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_149:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_155:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_156:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_160:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_161:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_17:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_173:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_183:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_187:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_188:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_190:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_202:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_203:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_205:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_208:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_210:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_211:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_220:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_33:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_42:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_47:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_73:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_74:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_80:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_87:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20:take_91:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_105:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_121:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_163:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_178:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_191:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_210:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_240:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_258:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_266:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_273:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_279:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_283:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_295:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_302:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_304:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_305:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_306:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_309:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_310:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_313:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_314:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_315:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_317:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_326:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_327:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_331:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_332:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_334:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.20sp:take_335:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_107:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_111:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_135:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_136:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_140:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_155:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_163:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_166:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_168:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_180:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_19:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_191:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_195:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_196:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_210:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_213:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_214:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_215:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_217:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_219:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_221:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_226:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_227:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_228:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_232:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_235:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_236:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_237:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_241:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_242:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_245:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_246:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_251:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_254:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_50:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30:take_76:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_101:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_31:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_32:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_45:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_49:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_56:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_73:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_75:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_82:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.30sp:take_97:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_100:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_102:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_114:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_118:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_119:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_120:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_121:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_125:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_126:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_131:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_138:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_139:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_150:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_153:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_154:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_156:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_158:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_161:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_172:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_173:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_25:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_38:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_45:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_48:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_53:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_54:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_55:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_65:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_67:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_69:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_74:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_77:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_78:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_83:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_87:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_89:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_91:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_92:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_93:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r80.40:take_94:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_10:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_11:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_13:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_17:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_23:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_25:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_27:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_29:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_34:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_36:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_42:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_44:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_51:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_56:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_58:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_60:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_65:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_68:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_69:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_72:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81:take_74:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:-:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_14:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_22:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_30:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_38:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_44:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_45:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_55:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_61:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_66:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_75:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_78:*:*:*:-:*:* 1 OR
cpe:2.3:a:checkpoint:ssl_network_extender:r81.10:take_9:*:*:*:-:*:* 1 OR
References
Reference URL Reference Tags
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271 Mitigation Patch Vendor Advisory
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2022-23746
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23746
History
Created Old Value New Value Data Type Notes
2022-12-07 18:05:41 Added to TrackCVE