CVE-2022-25292

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8...

CVE-2022-25360

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2...

CVE-2022-25360

CVE-2022-25360 affects WatchGuard Firebox and XTM appliances running Fireware OS. An authenticated remote attacker with unprivileged credentials can upload files to arbitrary locations. Affected versions include Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

CVE-2022-23176

CVE-2022-23176 affects WatchGuard Firebox and XTM appliances running Fireware OS. The vulnerability allows a remote attacker with unprivileged credentials to access the system with a privileged management session through exposed management access. Affected versions include Fireware OS before 12.7...

WatchGuard Firebox缓冲区错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A security vulnerability exists in a number of WatchGuard products, which stems...

PT-2022-17241 · Watchguard · Watchguard Firebox +1

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.1.3 U8 WatchGuard Firebox and XTM appliances versions 12.2.x through 12.5.x before 12.5.9 U2 WatchGuard Firebox and XTM appliances versions prior to 12.7.2 U2 Description: The issue...

WatchGuard Firebox 缓冲区错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A buffer error vulnerability exists in several WatchGuard products, which stems...

Watchguard WatchGuard Firebox 安全漏洞

Watchguard WatchGuard Firebox is a US-based Watchguard company that provides a comprehensive range of Internet security services, from traditional IPS and GAV to Web site/application control and malicious software prevention. A security vulnerability exists in WatchGuard Firebox that allows a...

WatchGuard Firebox 输入验证错误漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. An input validation error vulnerability exists in multiple WatchGuard products,...

PT-2022-17190 · Watchguard · Fireware Os +2

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances Fireware OS versions prior to 12.7.2 U2 WatchGuard Firebox and XTM appliances Fireware OS versions 12.x prior to 12.1.3 U8 WatchGuard Firebox and XTM appliances Fireware OS versions 12.2.x through 12.5.x...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

PT-2022-17189 · Watchguard · Watchguard Firebox +1

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances versions prior to 12.7.2 U2 WatchGuard Firebox and XTM appliances versions 12.x prior to 12.1.3 U8 WatchGuard Firebox and XTM appliances versions 12.2.x through 12.5.x prior to 12.5.9 U2 Description: A...

WatchGuard Firebox 缓冲区错误漏洞

Watchguard WatchGuard Fireware is a firewall operating system from WatchGuard Watchguard USA. The system supports intrusion prevention, spam filtering, SSL VPN, and other features. The WatchGuard Firebox suffers from a buffer error vulnerability that stems from a wgagent stack-based buffer overfl...

WatchGuard Firebox 代码问题漏洞

Watchguard WatchGuard Firebox is a Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV to website/application control and malicious software prevention. A code issue exists in WatchGuard Firebox where a vulnerability exists because a...

Watchguard WatchGuard Firebox 安全漏洞

Watchguard WatchGuard Firebox is a US-based Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A security vulnerability exists in WatchGuard Firebox that originates in...

Watchguard Firebox / XTM XML-RPC Empty Member Denial Of Service

Watchguardas Firebox and XTM are a series of enterprise grade network security appliances providing advanced security services like next generation firewall, intrusion prevention, malware detection and blockage and others. Two vulnerabilities were discovered affecting the XML-RPC interface of the...

WatchGuard Fireware User Enumeration Vulnerability

WatchGuard Fireware is a firewall appliance from WatchGuard USA that provides intrusion protection, spam filtering, SSL VPN and more with intelligent layering technology. A user enumeration vulnerability exists in WatchGuard Fireware v11.12.1 and earlier versions. An attacker can exploit this...

CVE-2017-8055

WatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this...