CVE-2023-5970: SonicWall SMA 200 Firmware

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.

Affected products

• SonicWall SMA 200 Firmware: up to and including 10.2.1.9-57sv
• SonicWall SMA 210 Firmware: up to and including 10.2.1.9-57sv
• SonicWall SMA 400 Firmware: up to and including 10.2.1.9-57sv
• SonicWall SMA 410 Firmware: up to and including 10.2.1.9-57sv
• SonicWall SMA 500v Firmware: up to and including 10.2.1.9-57sv

Published 2023-12-05. Last modified 2026-06-17.