Lucene search
+L

1508 matches found

NVD
NVD
•added 2025/01/28 12:15 a.m.•69 views

CVE-2022-31749

An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...

6.5CVSS0.01264EPSS
SaveExploits2References2
CNNVD
CNNVD
•added 2025/01/28 12:00 a.m.•21 views

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software from WatchGuard USA that runs on a Firebox. A security vulnerability exists in WatchGuard Fireware OS. An attacker could exploit the vulnerability to upload or read files to arbitrary locations on WatchGuard Firebox and XTM devices using unprivileged credentia...

6.5CVSS8.6AI score0.01264EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/28 12:00 a.m.•5 views

CVE-2022-31749: Improper Neutralization of Argument Delimiters in a Command

An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...

6.5CVSS6AI score0.01264EPSS
SaveExploits2References1
Cvelist
Cvelist
•added 2025/01/27 11:28 p.m.•69 views

CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS

An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...

6.5CVSS0.01264EPSS
SaveExploits2References2
CVE
CVE
•added 2025/01/27 11:28 p.m.•110 views

CVE-2022-31749

WatchGuard Fireware OS (WatchGuard Firebox and XTM appliances) is affected by an authenticated remote, low-privilege command-injection in the diagnose and import pac commands prior to updates. The issue allows an attacker with unprivileged credentials to upload or read files to limited, arbitrary...

6.5CVSS7.7AI score0.01264EPSS
SaveExploits2References2
Vulnrichment
Vulnrichment
•added 2025/01/27 11:28 p.m.•17 views

CVE-2022-31749 Authenticated arbitrary file read/write in WatchGuard Fireware OS

An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...

6.5CVSS6.6AI score0.01264EPSS
SaveExploits2References2
GithubExploit
GithubExploit
•added 2024/12/05 9:56 a.m.•712 views

Exploit for CVE-2022-26318

Watchguard-RCE-POC-CVE-2022-26318 PoC for Watc...

9.8CVSS6.9AI score0.78157EPSS
SaveExploits6
attackerkb
attackerkb
•added 2024/11/08 12:15 a.m.•9 views

CVE-2024-8424

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

8.5CVSS7.5AI score0.00191EPSS
SaveExploits0References3Affected Software2
NVD
NVD
•added 2024/11/08 12:15 a.m.•25 views

CVE-2024-8424

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

8.5CVSS0.00191EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•21 views

WatchGuard多款产品 安全漏洞

WatchGuard EPDR and others are products of WatchGuard USA.WatchGuard EPDR is an application.WatchGuard Panda AD360 is an advanced cybersecurity solution that integrates EPP, EDR and machine learning technologies.WatchGuard Panda Dome is an antivirus program. A security vulnerability exists in...

7.8CVSS6.8AI score0.00191EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•2 views

CVE-2024-8424: Improper Privilege Management

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

8.5CVSS7.4AI score0.00191EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2024/11/07 11:27 p.m.•37 views

CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

8.5CVSS0.00191EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/11/07 11:27 p.m.•13 views

CVE-2024-8424 WatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEM

Improper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows PSANHost.exe module allows arbitrary file delete with SYSTEM permissions...

8.5CVSS7.5AI score0.00191EPSS
SaveExploits0References2
CVE
CVE
•added 2024/11/07 11:27 p.m.•111 views

CVE-2024-8424

CVE-2024-8424 affects WatchGuard EPDR, Panda AD360, and Panda Dome on Windows via the PSANHost.exe module. The vulnerability is a local privilege escalation caused by improper privilege management, enabling arbitrary file deletion with SYSTEM permissions. Affected versions: EPDR before 8.00.23.00...

8.5CVSS7.5AI score0.00191EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/11/07 12:00 a.m.•16 views

PT-2024-39002

Name of the Vulnerable Software and Affected Versions: WatchGuard EPDR versions prior to 8.00.23.0000 Panda AD360 versions prior to 8.00.23.0000 Panda Dome versions prior to 22.03.00 Description: The issue is related to improper privilege management, allowing local attackers to escalate privilege...

8.5CVSS7.3AI score0.00191EPSS
SaveExploits0References13
Packet Storm
Packet Storm
•added 2024/10/15 12:00 a.m.•337 views

WatchGuard XTM Firebox 12.5.x Buffer Overflow

============================================================================================================================================= | Title : WatchGuard XTM Firebox 12.5.x Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2024/10/11 12:00 a.m.•444 views

Artica Proxy 4.40 Code Injection

============================================================================================================================================= | Title : Artica Proxy appliance 4.40 Code Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox...

7.4AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2024/10/03 12:00 a.m.•18 views

The vulnerability of the WatchGuard Authentication Gateway software is related to deficiencies in its authentication mechanism, which allows a malicious actor to gain unauthorized access to the credentials of any user.

The vulnerability of the WatchGuard Authentication Gateway software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the credentials of any user...

9.4CVSS5.5AI score0.00584EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/10/02 12:00 a.m.•19 views

The vulnerability of the WatchGuard Authentication Gateway software is related to deficiencies in its authentication mechanism, which allows a hacker to obtain memory dumps.

The vulnerability of the WatchGuard Authentication Gateway authentication software is related to deficiencies in its authentication mechanism. Exploiting this vulnerability could allow a malicious actor, operating remotely, to obtain memory dumps from the software through a specially crafted...

8.6CVSS5.5AI score0.01168EPSS
SaveExploits0References3Affected Software2
OSV
OSV
•added 2024/09/25 12:15 p.m.•19 views

CVE-2024-6593

Incorrect Authorization vulnerability in WatchGuard Authentication Gateway aka Single Sign-On Agent on Windows allows an attacker with network access to execute restricted management commands. This issue affects Authentication Gateway: through 12.10.2...

9.1CVSS5.9AI score0.00584EPSS
SaveExploits0References1
Rows per page
Query Builder