CVE-2025-1545

🗓️ 04 Dec 2025 21:48:27Reported by WatchGuardType

CVE-2025-1545 XPath injection allows unauthenticated access to Firebox configuration via interface.

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2025-1545	4 Dec 202522:08	–	circl
CNNVD	WatchGuard Fireware OS 安全漏洞	4 Dec 202500:00	–	cnnvd
Cvelist	CVE-2025-1545 WatchGuard Firebox XPath Injection Vulnerability in Web CGI	4 Dec 202521:48	–	cvelist
EUVD	EUVD-2025-201297	5 Dec 202500:31	–	euvd
NVD	CVE-2025-1545	4 Dec 202522:15	–	nvd
OSV	CVE-2025-1545	4 Dec 202522:15	–	osv
Positive Technologies	PT-2025-49165	4 Dec 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-1545	5 Dec 202522:33	–	redhatcve
Vulnrichment	CVE-2025-1545 WatchGuard Firebox XPath Injection Vulnerability in Web CGI	4 Dec 202521:48	–	vulnrichment

NVD

CNA

Node

watchguard firewareRange2025.1–2025.1.3

AND

watchguard firebox_t115-wMatch-

watchguard firebox_t125Match-

watchguard firebox_t125-wMatch-

watchguard firebox_t145Match-

watchguard firebox_t145-wMatch-

watchguard firebox_t185Match-

Node

watchguard firewareRange11.11–12.11.5

AND

watchguard firebox_m270Match-

watchguard firebox_m290Match-

watchguard firebox_m370Match-

watchguard firebox_m390Match-

watchguard firebox_m440Match-

watchguard firebox_m4600Match-

watchguard firebox_m470Match-

watchguard firebox_m4800Match-

watchguard firebox_m5600Match-

watchguard firebox_m570Match-

watchguard firebox_m5800Match-

watchguard firebox_m590Match-

watchguard firebox_m670Match-

watchguard firebox_m690Match-

watchguard firebox_nv5Match-

watchguard firebox_t20Match-

watchguard firebox_t25Match-

watchguard firebox_t40Match-

watchguard firebox_t45Match-

watchguard firebox_t55Match-

watchguard firebox_t70Match-

watchguard firebox_t80Match-

watchguard firebox_t85Match-

watchguard fireboxcloudMatch-

watchguard fireboxvMatch-

Node

watchguard firewareRange11.11–12.5.14

AND

watchguard firebox_t15Match-

watchguard firebox_t35Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Fireware OS",
    "vendor": "WatchGuard",
    "versions": [
      {
        "lessThanOrEqual": "11.12.4+541730",
        "status": "affected",
        "version": "11.11",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.11.4",
        "status": "affected",
        "version": "12.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "12.5.13",
        "status": "affected",
        "version": "12.5",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "2025.1.2",
        "status": "affected",
        "version": "2025.1",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
watchguard	www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025

17 Jun 2026 08:39Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

CVSS 48.2

EPSS0.00402

SSVC

CWE-91