CVE-2022-23746

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
checkpointCNA
---
---
CVEADP
---
---
CISA-ADPADP
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 41%
VendorProductVersion
checkpointssl_network_extender
r80.20
checkpointssl_network_extender
r80.20:take_10
checkpointssl_network_extender
r80.20:take_103
checkpointssl_network_extender
r80.20:take_117
checkpointssl_network_extender
r80.20:take_118
checkpointssl_network_extender
r80.20:take_127
checkpointssl_network_extender
r80.20:take_134
checkpointssl_network_extender
r80.20:take_135
checkpointssl_network_extender
r80.20:take_138
checkpointssl_network_extender
r80.20:take_141
checkpointssl_network_extender
r80.20:take_149
checkpointssl_network_extender
r80.20:take_155
checkpointssl_network_extender
r80.20:take_156
checkpointssl_network_extender
r80.20:take_160
checkpointssl_network_extender
r80.20:take_161
checkpointssl_network_extender
r80.20:take_17
checkpointssl_network_extender
r80.20:take_173
checkpointssl_network_extender
r80.20:take_183
checkpointssl_network_extender
r80.20:take_187
checkpointssl_network_extender
r80.20:take_188
checkpointssl_network_extender
r80.20:take_190
checkpointssl_network_extender
r80.20:take_202
checkpointssl_network_extender
r80.20:take_203
checkpointssl_network_extender
r80.20:take_205
checkpointssl_network_extender
r80.20:take_208
checkpointssl_network_extender
r80.20:take_210
checkpointssl_network_extender
r80.20:take_211
checkpointssl_network_extender
r80.20:take_220
checkpointssl_network_extender
r80.20:take_33
checkpointssl_network_extender
r80.20:take_42
checkpointssl_network_extender
r80.20:take_47
checkpointssl_network_extender
r80.20:take_73
checkpointssl_network_extender
r80.20:take_74
checkpointssl_network_extender
r80.20:take_80
checkpointssl_network_extender
r80.20:take_87
checkpointssl_network_extender
r80.20:take_91
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.20sp:sp
checkpointssl_network_extender
r80.30
checkpointssl_network_extender
r80.30:take_107
checkpointssl_network_extender
r80.30:take_111
checkpointssl_network_extender
r80.30:take_135
checkpointssl_network_extender
r80.30:take_136
checkpointssl_network_extender
r80.30:take_140
checkpointssl_network_extender
r80.30:take_155
checkpointssl_network_extender
r80.30:take_163
checkpointssl_network_extender
r80.30:take_166
checkpointssl_network_extender
r80.30:take_168
checkpointssl_network_extender
r80.30:take_180
checkpointssl_network_extender
r80.30:take_19
checkpointssl_network_extender
r80.30:take_191
checkpointssl_network_extender
r80.30:take_195
checkpointssl_network_extender
r80.30:take_196
checkpointssl_network_extender
r80.30:take_210
checkpointssl_network_extender
r80.30:take_213
checkpointssl_network_extender
r80.30:take_214
checkpointssl_network_extender
r80.30:take_215
checkpointssl_network_extender
r80.30:take_217
checkpointssl_network_extender
r80.30:take_219
checkpointssl_network_extender
r80.30:take_221
checkpointssl_network_extender
r80.30:take_226
checkpointssl_network_extender
r80.30:take_227
checkpointssl_network_extender
r80.30:take_228
checkpointssl_network_extender
r80.30:take_232
checkpointssl_network_extender
r80.30:take_235
checkpointssl_network_extender
r80.30:take_236
checkpointssl_network_extender
r80.30:take_237
checkpointssl_network_extender
r80.30:take_241
checkpointssl_network_extender
r80.30:take_242
checkpointssl_network_extender
r80.30:take_245
checkpointssl_network_extender
r80.30:take_246
checkpointssl_network_extender
r80.30:take_251
checkpointssl_network_extender
r80.30:take_254
checkpointssl_network_extender
r80.30:take_50
checkpointssl_network_extender
r80.30:take_76
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.30sp:sp
checkpointssl_network_extender
r80.40
checkpointssl_network_extender
r80.40:take_100
checkpointssl_network_extender
r80.40:take_102
checkpointssl_network_extender
r80.40:take_114
checkpointssl_network_extender
r80.40:take_118
checkpointssl_network_extender
r80.40:take_119
checkpointssl_network_extender
r80.40:take_120
checkpointssl_network_extender
r80.40:take_121
checkpointssl_network_extender
r80.40:take_125
checkpointssl_network_extender
r80.40:take_126
checkpointssl_network_extender
r80.40:take_131
checkpointssl_network_extender
r80.40:take_138
checkpointssl_network_extender
r80.40:take_139
checkpointssl_network_extender
r80.40:take_150
checkpointssl_network_extender
r80.40:take_153
checkpointssl_network_extender
r80.40:take_154
checkpointssl_network_extender
r80.40:take_156
checkpointssl_network_extender
r80.40:take_158
checkpointssl_network_extender
r80.40:take_161
checkpointssl_network_extender
r80.40:take_172
checkpointssl_network_extender
r80.40:take_173
checkpointssl_network_extender
r80.40:take_25
checkpointssl_network_extender
r80.40:take_38
checkpointssl_network_extender
r80.40:take_45
checkpointssl_network_extender
r80.40:take_48
checkpointssl_network_extender
r80.40:take_53
checkpointssl_network_extender
r80.40:take_54
checkpointssl_network_extender
r80.40:take_55
checkpointssl_network_extender
r80.40:take_65
checkpointssl_network_extender
r80.40:take_67
checkpointssl_network_extender
r80.40:take_69
checkpointssl_network_extender
r80.40:take_74
checkpointssl_network_extender
r80.40:take_77
checkpointssl_network_extender
r80.40:take_78
checkpointssl_network_extender
r80.40:take_83
checkpointssl_network_extender
r80.40:take_87
checkpointssl_network_extender
r80.40:take_89
checkpointssl_network_extender
r80.40:take_91
checkpointssl_network_extender
r80.40:take_92
checkpointssl_network_extender
r80.40:take_93
checkpointssl_network_extender
r80.40:take_94
checkpointssl_network_extender
r81.10
checkpointssl_network_extender
r81.10:take_14
checkpointssl_network_extender
r81.10:take_22
checkpointssl_network_extender
r81.10:take_30
checkpointssl_network_extender
r81.10:take_38
checkpointssl_network_extender
r81.10:take_44
checkpointssl_network_extender
r81.10:take_45
checkpointssl_network_extender
r81.10:take_55
checkpointssl_network_extender
r81.10:take_61
checkpointssl_network_extender
r81.10:take_66
checkpointssl_network_extender
r81.10:take_75
checkpointssl_network_extender
r81.10:take_78
checkpointssl_network_extender
r81.10:take_9
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk180271