Lucene search

[email protected]CVE-2022-25361

HistoryJun 07, 2022 - 2:15 p.m.

CVE-2022-25361

2022-06-0714:15:09

[email protected]

web.nvd.nist.gov

watchguard

firebox

xtm

appliances

vulnerability

remote attacker

file deletion

fireware os

cve-2022-25361

nvd

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9.1 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%

JSON

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

Affected configurations

NVD

Node

watchguardfirewareRange12.0.0–12.1.3

watchguardfirewareRange12.2.0–12.5.9

watchguardfirewareMatch12.1.3-

watchguardfirewareMatch12.1.3u1

watchguardfirewareMatch12.1.3u2

watchguardfirewareMatch12.1.3u3

watchguardfirewareMatch12.1.3u4

watchguardfirewareMatch12.1.3u5

watchguardfirewareMatch12.1.3u6

watchguardfirewareMatch12.1.3u7

watchguardfirewareMatch12.5.9-

watchguardfirewareMatch12.5.9u1

watchguardfirewareMatch12.7.2-

watchguardfirewareMatch12.7.2u1

AND

watchguardfirebox_m200Match-

watchguardfirebox_m270Match-

watchguardfirebox_m290Match-

watchguardfirebox_m300Match-

watchguardfirebox_m370Match-

watchguardfirebox_m390Match-

watchguardfirebox_m400Match-

watchguardfirebox_m440Match-

watchguardfirebox_m470Match-

watchguardfirebox_m4800Match-

watchguardfirebox_m500Match-

watchguardfirebox_m570Match-

watchguardfirebox_m5800Match-

watchguardfirebox_m590Match-

watchguardfirebox_m670Match-

watchguardfirebox_m690Match-

watchguardfirebox_t10Match-

watchguardfirebox_t10-dMatch-

watchguardfirebox_t10-wMatch-

watchguardfirebox_t15Match-

watchguardfirebox_t15-wMatch-

watchguardfirebox_t20Match-

watchguardfirebox_t20-wMatch-

watchguardfirebox_t30Match-

watchguardfirebox_t30-wMatch-

watchguardfirebox_t35Match-

watchguardfirebox_t35-rMatch-

watchguardfirebox_t35-wMatch-

watchguardfirebox_t40Match-

watchguardfirebox_t40-wMatch-

watchguardfirebox_t50Match-

watchguardfirebox_t50-wMatch-

watchguardfirebox_t55Match-

watchguardfirebox_t55-wMatch-

watchguardfirebox_t70Match-

watchguardfirebox_t80Match-

watchguardfirebox_xtm1520-rpMatch-

watchguardfirebox_xtm1525-rpMatch-

watchguardfirebox_xtm2520Match-

watchguardfirebox_xtm850Match-

watchguardfirebox_xtm860Match-

watchguardfirebox_xtm870Match-

watchguardfirebox_xtm870-fMatch-

watchguardfireboxcloudMatch-

watchguardfireboxvMatch-

watchguardxtmvMatch-

CPENameOperatorVersion
watchguard:firewarewatchguard firewarelt12.1.3
watchguard:firewarewatchguard firewarelt12.5.9
watchguard:firewarewatchguard firewareeq12.7.2

CPE	Name	Operator	Version
watchguard:fireware	watchguard fireware	lt	12.1.3
watchguard:fireware	watchguard fireware	lt	12.5.9
watchguard:fireware	watchguard fireware	eq	12.7.2

References

watchguard.com

www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004

Social References

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

9.1 High

AI Score

Confidence

High

6.4 Medium

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

0.002 Low

EPSS

Percentile

58.7%

JSON

Related for CVE-2022-25361

prion1 nvd1 cvelist1