CVE-2023-27100

Name of the Vulnerable Software and Affected Versions pfSense Plus software version 22.05.1 pfSense CE software version 2.6.0

Description The issue is related to improper restriction of excessive authentication attempts in the SSHGuard component, allowing attackers to bypass brute force protection mechanisms via crafted web requests.

Recommendations For pfSense Plus software version 22.05.1, update to a version that includes a fix for this issue. For pfSense CE software version 2.6.0, update to a version that includes a fix for this issue. As a temporary workaround, consider restricting access to the SSHGuard component to minimize the risk of exploitation.