CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2U1, 12.x before 12.1.3U3, and 12.2.x through 12.5.x before...

PT-2022-2347

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox and XTM appliances versions prior to 12.1.3 U3 WatchGuard Firebox and XTM appliances versions 12.2.x through 12.5.x before 12.5.7 U3 WatchGuard Firebox and XTM appliances versions prior to 12.7.2 U1 Description The issue is...

Nagios XI WatchGuard Wizard Command Injection (CVE-2021-37346)

A command injection vulnerability exists in Nagios XI. The vulnerability is due to insufficient input validation of the requests submitted to the watchguard.inc.php...

CVE-2021-37346

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37346

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

Command injection

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37346

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37346

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

CVE-2021-37346

CVE-2021-37346 affects Nagios XI WatchGuard Wizard prior to version 1.4.8. The vulnerability is an OS command injection caused by improper neutralisation of special elements in commands (insufficient input validation in watchguard.inc.php). Impact is remote code execution with the privileges of t...

PT-2021-21616

Name of the Vulnerable Software and Affected Versions Nagios XI WatchGuard Wizard versions prior to 1.4.8 Description The issue is related to remote code execution through improper neutralisation of special elements used in an OS Command, also known as OS Command injection. This allows for the...

Nagios XI 操作系统命令注入漏洞

Nagios XI is a suite of IT infrastructure monitoring solutions from the US-based Nagios. The solution supports monitoring and alerting of applications, services, operating systems and more. A security vulnerability exists in Nagios XI Switch Wizard, which stems from the fact that Nagios XI...

CVE-2021-37346: Improper Neutralization of Special Elements used in an OS Command

Nagios XI WatchGuard Wizard before version 1.4.8 is vulnerable to remote code execution through Improper neutralisation of special elements used in an OS Command OS Command injection...

WatchGuard Fireware Plaintext Password Vulnerability

WatchGuard Fireware is a firewall operating system from WatchGuard USA. The system supports intrusion protection, spam virus email filtering, SSL VPN, and more. A security vulnerability exists in the AD Helper component of WatchGuard Fireware versions prior to 5.8.5.10317. A remote attacker can...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

Design/Logic Flaw

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

The AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI...

CVE-2020-10532

CVE-2020-10532 affects WatchGuard Fireware (AD Helper) prior to 5.8.5.10317. A remote attacker can obtain cleartext passwords via the /domains/list URI, as described in multiple connected sources. The vulnerability is due to how the AD Helper handles credential data, enabling plaintext password d...

PT-2020-12189

Name of the Vulnerable Software and Affected Versions WatchGuard Fireware versions prior to 5.8.5.10317 Description The issue allows remote attackers to discover cleartext passwords. This is achieved via the "/domains/list" URI, which is an API endpoint. The estimated number of potentially affect...

WatchGuard Fireware AD Helper 5.8.5.10317 Credential Disclosure

Exploit: WatchGuard Fireware AD Helper Component 5.8.5.10317 - Credential Disclosure Author: RedTeam Pentesting GmbH Date: 2020-03-11 Vendor: https://www.watchguard.com Software link: https://www.watchguard.com/help/docs/help-center/en-US/Content/en-US/Fireware/services/tdr/tdradhelperc.html CVE:...