Authentication bypass in SSL-VPN gateways

Summary

On some SSL-VPN gateways running 9.x firmware, a specially crafted request can skip authentication and create an administrator session. Our SOC data shows internet-wide scanning traffic targeting this flaw.

Impact

An attacker can change configuration, access user session data and tunnel into the internal network.

Detection

Requests to the management interface from unusual source IPs and unexpected new administrator accounts are indicators.