← Vulnerability feed

Vulnerability record · CVE-2023-27100 · published 22 March 2023

CVE-2023-27100: Netgate pfsense plus improper restriction of authentication attempts vulnerability

Netgate · Pfsense Plus

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

9.8 CVSS 3.1 Critical EPSS 9.8% · top 4.6% CWE-307 · Improper restriction of authentication attempts
9.8CVSS 3.1 base score
9.8%EPSS exploitation probability, 30 days
NoNot in CISA KEV
2Affected product versions listed by NVD
7References
17 Jun 2026Last modified by NVD

Description

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected products

2 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html
https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc Vendor Advisory
https://redmine.pfsense.org/issues/13574 Issue TrackingPatchVendor Advisory
http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html
https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc Vendor Advisory
https://redmine.pfsense.org/issues/13574 Issue TrackingPatchVendor Advisory
https://packetstorm.news/files/id/171791

Track CVE-2023-27100 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.9CVE-2025-69691Pfsense improper access control vulnerabilityNetgate pfSense CE 2.8.0 allows code execution in the XMLRPC API via pfsense.exec_php. NOTE: the Supplier disputes this because the API call is only …EPSS 0.68%9.8CVE-2023-29974Pfsense weak password requirements vulnerabilityAn issue discovered in Pfsense CE version 2.6.0 allows attackers to compromise user accounts via weak password requirements.EPSS 1.8%9.1CVE-2025-69690Pfsense deserialization of untrusted data vulnerabilityNetgate pfSense CE 2.7.2 allows code execution by using the module installer with a backup file with a serialized PHP object containing the post_rebo…EPSS 0.81%8.8CVE-2024-54780Netgate pfsense ce code injection vulnerabilityNetgate pfSense CE (prior to 2.8.0 beta release) and corresponding Plus builds are vulnerable to command injection in the OpenVPN widget due to impro…EPSS 12%8.8CVE-2023-48123pfSense web GUI packet_capture.php remote code executionpfSense Plus 23.05.1 and earlier and pfSense CE 2.7.0 allow a remote attacker to execute arbitrary code through a crafted request to packet_capture.p…EPSS 68%analysed8.8CVE-2023-42326pfSense WebGUI GIF/GRE Interface Command InjectionNetgate pfSense 2.7.0 contains a command injection flaw in the interfaces_gif_edit.php and interfaces_gre_edit.php WebGUI components. A remote attack…EPSS 64%analysed8.8CVE-2022-24299Netgate pfsense improper input validation vulnerabilityImproper input validation vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software version…EPSS 1.9%8.8CVE-2022-26019Netgate pfsense path traversal vulnerabilityImproper access control vulnerability in pfSense CE and pfSense Plus (pfSense CE software versions prior to 2.6.0 and pfSense Plus software versions …EPSS 4.5%

Source: NIST National Vulnerability Database (record CVE-2023-27100), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.