description: Improper authentication in the SMA100 SSL-VPN virtual office portal allows a remote authenticated attacker to create an identical external domain user using accent characters, resulting in an MFA bypass.
problem types: CWE-287 Improper Authentication
affected:
{
defaultStatus: unknown
platforms: [SMA 200, SMA 210, SMA 400, SMA 410, SMA 500v]
product: SMA100
vendor: SonicWall
versions:
status: affected, version: 10.2.1.9-57sv and earlier versions
}