Watchguard Firebox / XTM XXE Injection

Watchguardas Firebox and XTM are a series of enterprise grade network security appliances providing advanced security services like next generation firewall, intrusion prevention, malware detection and blockage and others. Two vulnerabilities were discovered affecting the XML-RPC interface of the...

Watchguard Firebox / XTM XXE Injection Vulnerability

Watchguard's Firebox and XTM appliances suffer from XML external entity injection and XML-RPC user enumeration vulnerabilities. Watchguardas Firebox and XTM are a series of enterprise grade network security appliances providing advanced security services like next generation firewall, intrusion...

WatchGuard Firewall Detection

Binary data 700037.prm...

WatchGuard Firebox Certificate Detection

Binary data 700049.prm...

WatchGuard Fireware XTM < 11.12.1 Multiple Vulnerabilities

WatchGuard Fireware XMT Web UI is prone to multiple vulnerabilities. Copyright C 2017 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

WatchGuard XTMv 11.12 Build 516911 Cross Site Request Forgery

KL-001-2017-004 : WatchGuard XTMv User Management Cross-Site Request Forgery Title: WatchGuard XTMv User Management Cross-Site Request Forgery Advisory ID: KL-001-2017-004 Publication Date: 2017.03.10 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-004.txt 1...

WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery Vulnerability

Exploit for hardware platform in category web applications !-- KL-001-2017-004 : WatchGuard XTMv User Management Cross-Site Request Forgery Title: WatchGuard XTMv User Management Cross-Site Request Forgery Advisory ID: KL-001-2017-004 Publication Date: 2017.03.10 Publication URL:...

WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery

WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery !-- KL-001-2017-004 : WatchGuard XTMv User Management Cross-Site Request Forgery Title: WatchGuard XTMv User Management Cross-Site Request Forgery Advisory ID: KL-001-2017-004 Publication Date: 2017.03.10 Publication...

WatchGuard XTMv User Management Cross-Site Request Forgery

Vulnerability Details Affected Vendor: WatchGuard Affected Product: XTMv Affected Version: v11.12 Build 516911 Platform: Embedded Linux CWE Classification: CWE-352: Cross-Site Request Forgery CSRF Impact: Privileged Access Attack vector: HTTP 2. Vulnerability Description Lack of CSRF protection...

WatchGuard XTMv 11.12 Build 516911 - User Management Cross-Site Request Forgery

!-- KL-001-2017-004 : WatchGuard XTMv User Management Cross-Site Request Forgery Title: WatchGuard XTMv User Management Cross-Site Request Forgery Advisory ID: KL-001-2017-004 Publication Date: 2017.03.10 Publication URL: https://www.korelogic.com/Resources/Advisories/KL-001-2017-004.txt 1...

VulnCheck KEV: CVE-2016-7089

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN...

WatchGuard RapidStream Elevation of Privilege Vulnerability

WatchGuard RapidStream is a firewall appliance from WatchGuard USA. An elevation of privilege vulnerability exists in the WatchGuard RapidStream appliance. A local attacker can exploit this vulnerability with a specially crafted ifconfig command to gain privileges and execute arbitrary commands...

CVE-2016-7089

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN...

CVE-2016-7089

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN...

CVE-2016-7089

The WatchGuard RapidStream firewall appliance is vulnerable to a local privilege escalation flaw, known as ESCALATEPLOWMAN . A local attacker can exploit this by providing a specially crafted ifconfig command , which allows them to gain elevated privileges and execute arbitrary commands on the sy...

CVE-2016-7089: Undefined Security Weakness

WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN...

WatchGuard Firewalls - ifconfig Privilege Escalation (ESCALATEPLOWMAN)

No description provided by source...

PT-2016-7207

Name of the Vulnerable Software and Affected Versions WatchGuard RapidStream appliances affected versions not specified Description The issue allows local users to gain privileges and execute arbitrary commands by using a crafted ifconfig command. Recommendations At the moment, there is no...

Watchguard Firewalls - 'ESCALATEPLOWMAN' ifconfig Privilege Escalation

Exploit for linux platform in category local exploits Exploit Title: WatchGuard Firewalls - ifconfig Privilege Escalation ESCALATEPLOWMAN Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.watchguard.com/ Full Exploit:...

Watchguard Firewalls - ESCALATEPLOWMAN ifconfig Privilege Escalation

Watchguard Firewalls - ESCALATEPLOWMAN ifconfig Privilege Escalation Exploit Title: WatchGuard Firewalls - ifconfig Privilege Escalation ESCALATEPLOWMAN Date: 19-08-2016 Exploit Author: Shadow Brokers Vendor Homepage: http://www.watchguard.com/ Full Exploit:...