CVE-2022-25293

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8...

CVE-2022-25292

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8...

CVE-2022-25360

CVE-2022-25360 affects WatchGuard Firebox and XTM appliances running Fireware OS. An authenticated remote attacker with unprivileged credentials can upload files to arbitrary locations. Affected versions include Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before...

CVE-2022-25360

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

PT-2022-17190 · Watchguard · Fireware Os +2

Name of the Vulnerable Software and Affected Versions: WatchGuard Firebox and XTM appliances Fireware OS versions prior to 12.7.2 U2 WatchGuard Firebox and XTM appliances Fireware OS versions 12.x prior to 12.1.3 U8 WatchGuard Firebox and XTM appliances Fireware OS versions 12.2.x through 12.5.x...

Watchguard WatchGuard Firebox 安全漏洞

Watchguard WatchGuard Firebox is a US-based Watchguard company that provides a comprehensive range of network security services, from traditional IPS and GAV, to website/application control and malicious software prevention. A security vulnerability exists in WatchGuard Firebox that originates in...

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

WatchGuard Fireware Plaintext Password Vulnerability

WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A security vulnerability exists in the AD Helper component of WatchGuard Fireware versions prior to 5.8.5.10317. A remote attacker can...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

Design/Logic Flaw

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

CVE-2020-10532 affects WatchGuard Fireware (AD Helper) prior to 5.8.5.10317. A remote attacker can obtain cleartext passwords via the /domains/list URI, as described in multiple connected sources. The vulnerability is due to how the AD Helper handles credential data, enabling plaintext password d...

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link:...

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure

Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...

WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Vulnerability

Exploit for java platform in category web applications Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Vendor: https://www.watchguard.com Software link:...

WatchGuard Fireware AD Helper 5.8.5.10317 Credential Disclosure

Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...

Watchguard Fireware Cross-Site Scripting Vulnerability (CNVD-2019-29226)

WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A cross-site scripting vulnerability exists in the authentication program in Watchguard Fireware version 11.11, which can be exploited b...

CVE-2016-6154

The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS this can also cause an open redirect...