SecurePwn Part 1: Bypassing SecurePoint UTM’s Authentication (CVE-2023-22620)

While working on a recent customer penetration test, I discovered two fascinating and somewhat weird bugs in SecurePoint’s UTM firewall solution. The first one, aka CVE-2023-22620, is rated critical for an attacker to bypass the entire authentication and gain access to the firewall’s administrative panel. Since there is an easy way to get root access […]

access advisory authentication bugs bypass bypassing critical customer cve exploit firewall panel penetration penetration test root root access securepoint solution test utm weird working