Vulnerability Database

310,469

Total vulnerabilities in the database

CVE-2023-27100

Improper restriction of excessive authentication attempts in the SSHGuard component of Netgate pfSense Plus software v22.05.1 and pfSense CE software v2.6.0 allows attackers to bypass brute force protection mechanisms via crafted web requests.

Published: Mar 22, 2023
Updated: Nov 16, 2025
CVE: CVE-2023-27100
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWEs:

CWE-307

Affected Software
References

Software	From	Fixed in
netgate / pfsense_plus	22.05.1	22.05.1.x
pfsense / pfsense	2.6.0	2.6.0.x

http://packetstormsecurity.com/files/171791/pfsenseCE-2.6.0-Protection-Bypass.html
https://docs.netgate.com/downloads/pfSense-SA-23_05.sshguard.asc
https://packetstorm.news/files/id/171791
https://redmine.pfsense.org/issues/13574

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo