7.5

CVE-2022-23746: checkpoint ssl_network_extender

CVSS: 7.5v3.1HighModified
Published 30-11-2022Last modified 25-04-2025
Open JSON

Vulnerability summary

CVE-2022-23746 is a high (CVSS 7.5) vulnerability in checkpoint ssl_network_extender. EPSS estimates a 0.63% chance of exploitation in the next 30 days, higher than 48.9% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
0.63%
0%100%
Low · +0.02 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 30-11-2022
    PublishedVulnerability first disclosed.
  2. 25-04-2025
    Last modifiedVulnerability information updated.

Description

The IPsec VPN blade has a dedicated portal for downloading and connecting through SSL Network Extender (SNX). If the portal is configured for username/password authentication, it is vulnerable to a brute-force attack on usernames and passwords.

CVSS metrics

2 scores · 2 sources · 1 version

EPSS trend

Probability

0.63%

Chance of exploitation in the next 30 days

Percentile

49%

Versus all other CVEs

30-day change

+0.02 pp

From 0.61% on 18-09-2026

18-09-202618-10-2026
EPSS score
0.63%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Checkpoint1 product
  • ssl_network_extenderr80.20 | r80.20:take_10 | r80.20:take_103 | r80.20:take_117 | r80.20:take_118 | r80.20:take_127 | r80.20:take_134 | r80.20:take_135 | r80.20:take_138 | r80.20:take_141 | r80.20:take_149 | r80.20:take_155 | r80.20:take_156 | r80.20:take_160 | r80.20:take_161 | r80.20:take_17 | r80.20:take_173 | r80.20:take_183 | r80.20:take_187 | r80.20:take_188 | r80.20:take_190 | r80.20:take_202 | r80.20:take_203 | r80.20:take_205 | r80.20:take_208 | r80.20:take_210 | r80.20:take_211 | r80.20:take_220 | r80.20:take_33 | r80.20:take_42 | r80.20:take_47 | r80.20:take_73 | r80.20:take_74 | r80.20:take_80 | r80.20:take_87 | r80.20:take_91 | r80.20sp | r80.20sp:take_105 | r80.20sp:take_121 | r80.20sp:take_163 | r80.20sp:take_178 | r80.20sp:take_191 | r80.20sp:take_210 | r80.20sp:take_240 | r80.20sp:take_258 | r80.20sp:take_266 | r80.20sp:take_273 | r80.20sp:take_279 | r80.20sp:take_283 | r80.20sp:take_295 | r80.20sp:take_302 | r80.20sp:take_304 | r80.20sp:take_305 | r80.20sp:take_306 | r80.20sp:take_309 | r80.20sp:take_310 | r80.20sp:take_313 | r80.20sp:take_314 | r80.20sp:take_315 | r80.20sp:take_317 | r80.20sp:take_326 | r80.20sp:take_327 | r80.20sp:take_331 | r80.20sp:take_332 | r80.20sp:take_334 | r80.20sp:take_335 | r80.30 | r80.30:take_107 | r80.30:take_111 | r80.30:take_135 | r80.30:take_136 | r80.30:take_140 | r80.30:take_155 | r80.30:take_163 | r80.30:take_166 | r80.30:take_168 | r80.30:take_180 | r80.30:take_19 | r80.30:take_191 | r80.30:take_195 | r80.30:take_196 | r80.30:take_210 | r80.30:take_213 | r80.30:take_214 | r80.30:take_215 | r80.30:take_217 | r80.30:take_219 | r80.30:take_221 | r80.30:take_226 | r80.30:take_227 | r80.30:take_228 | r80.30:take_232 | r80.30:take_235 | r80.30:take_236 | r80.30:take_237 | r80.30:take_241 | r80.30:take_242 | r80.30:take_245 | r80.30:take_246 | r80.30:take_251 | r80.30:take_254 | r80.30:take_50 | r80.30:take_76 | r80.30sp | r80.30sp:take_101 | r80.30sp:take_31 | r80.30sp:take_32 | r80.30sp:take_45 | r80.30sp:take_49 | r80.30sp:take_56 | r80.30sp:take_73 | r80.30sp:take_75 | r80.30sp:take_82 | r80.30sp:take_97 | r80.40 | r80.40:take_100 | r80.40:take_102 | r80.40:take_114 | r80.40:take_118 | r80.40:take_119 | r80.40:take_120 | r80.40:take_121 | r80.40:take_125 | r80.40:take_126 | r80.40:take_131 | r80.40:take_138 | r80.40:take_139 | r80.40:take_150 | r80.40:take_153 | r80.40:take_154 | r80.40:take_156 | r80.40:take_158 | r80.40:take_161 | r80.40:take_172 | r80.40:take_173 | r80.40:take_25 | r80.40:take_38 | r80.40:take_45 | r80.40:take_48 | r80.40:take_53 | r80.40:take_54 | r80.40:take_55 | r80.40:take_65 | r80.40:take_67 | r80.40:take_69 | r80.40:take_74 | r80.40:take_77 | r80.40:take_78 | r80.40:take_83 | r80.40:take_87 | r80.40:take_89 | r80.40:take_91 | r80.40:take_92 | r80.40:take_93 | r80.40:take_94 | r81 | r81:take_10 | r81:take_11 | r81:take_13 | r81:take_17 | r81:take_23 | r81:take_25 | r81:take_27 | r81:take_29 | r81:take_34 | r81:take_36 | r81:take_42 | r81:take_44 | r81:take_51 | r81:take_56 | r81:take_58 | r81:take_60 | r81:take_65 | r81:take_68 | r81:take_69 | r81:take_72 | r81:take_74 | r81.10 | r81.10:take_14 | r81.10:take_22 | r81.10:take_30 | r81.10:take_38 | r81.10:take_44 | r81.10:take_45 | r81.10:take_55 | r81.10:take_61 | r81.10:take_66 | r81.10:take_75 | r81.10:take_78 | r81.10:take_9

1 vendor · 1 product

References

1 links