Code injection

2022-02-2415:15:00

PRIOn knowledge base

www.prio-n.com

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

47.7%

JSON

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

CPENameOperatorVersion
firewarege12.0.0
firewarelt12.1.3
firewareeq12.1.3 u1
firewareeq12.1.3 u2
firewareeq12.1.3
firewareeq12.7.2 u1
firewareeq12.7.2
firewarege12.7.0
firewarelt12.7.2
firewareeq12.5.9 u1

Name	Operator	Version
fireware	ge	12.0.0
fireware	lt	12.1.3
fireware	eq	12.1.3 u1
fireware	eq	12.1.3 u2
fireware	eq	12.1.3
fireware	eq	12.7.2 u1
fireware	eq	12.7.2
fireware	ge	12.7.0
fireware	lt	12.7.2
fireware	eq	12.5.9 u1