Lucene search
+L

1026 matches found

Positive Technologies
Positive Technologies
added 2025/11/06 12:00 a.m.11 views

PT-2025-45340

Name of the Vulnerable Software and Affected Versions WatchGuard Firebox versions through 2025-09-10 Description The default configuration of WatchGuard Firebox devices allows administrative access via SSH on port 4118 using the default 'readwrite' password for the 'admin' account. This allows...

9.8CVSS7.3AI score0.00043EPSS
SaveExploits3References12
CVE
CVE
added 2025/11/06 12:00 a.m.60 views

CVE-2025-59396

CVE-2025-59396 is associated with a default-configuration vulnerability in WatchGuard Firebox devices. The exposed detail from connected documents shows that the default SSH port 4118 permits administrative access using the default admin:readwrite credentials, enabling unauthenticated remote cont...

6.7AI score0.00043EPSS
SaveExploits3
GithubExploit
GithubExploit
added 2025/11/03 11:12 a.m.245 views

Exploit for CVE-2025-59396

PoC exploit for CVE-2025-59396, an exploit targeting a default c...

8.2AI score0.00043EPSS
SaveExploits3
Packet Storm
Packet Storm
added 2025/11/03 12:00 a.m.343 views

📄 WatchGuard Firebox Default Credentials / SSH Access

The default configuration of WatchGuard Firebox devices through 2025-09-10 allows administrative access via SSH on port 4118 using the default credentials. This configuration exposes the device to remote attackers who can gain full administrative access without prior authentication. CVE-2025-5939...

7.2AI score0.00043EPSS
SaveExploits3
RedhatCVE
RedhatCVE
added 2025/10/30 5:09 p.m.8 views

CVE-2025-1549

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

7.8CVSS7.3AI score0.00333EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/29 6:30 p.m.14 views

EUVD-2025-36672

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

7.8CVSS7AI score0.00333EPSS
SaveExploits0References2
NVD
NVD
added 2025/10/29 5:15 p.m.20 views

CVE-2025-1549

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

6.3CVSS0.00142EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2025/10/29 4:50 p.m.26 views

CVE-2025-1549 WatchGuard Mobile VPN with SSL Local Privilege Escallation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

6.3CVSS6.9AI score0.00142EPSS
SaveExploits0References2
CVE
CVE
added 2025/10/29 4:50 p.m.37 views

CVE-2025-1549

CVE-2025-1549 affects the WatchGuard Mobile VPN with SSL client for Windows. It describes a local privilege escalation where a local user can execute arbitrary commands with elevated privileges. The issue is stated as an additional unmitigated attack path for CVE-2024-4944. The vulnerability is r...

6.3CVSS6.9AI score0.00142EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2025/10/29 4:50 p.m.41 views

CVE-2025-1549 WatchGuard Mobile VPN with SSL Local Privilege Escallation

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileges on the Windows system. This vulnerability is an additional unmitigated attack path for CVE-2024-4944. This vulnerability i...

6.3CVSS0.00142EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/29 12:00 a.m.11 views

WatchGuard Mobile VPN with SSL client 安全漏洞

WatchGuard Mobile VPN with SSL client is a remote access software from WatchGuard USA. A security vulnerability exists in WatchGuard Mobile VPN with SSL client that originates from an arbitrary command that can be executed by a local user, which may result in elevated privileges...

6.3CVSS6.9AI score0.00142EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2025/10/29 12:00 a.m.17 views

PT-2025-44319

Name of the Vulnerable Software and Affected Versions WatchGuard Mobile VPN with SSL client versions prior to 12.11.3 Description A local privilege escalation issue exists in the WatchGuard Mobile VPN with SSL client on Windows. A local user can execute arbitrary commands with elevated privileges...

7.8CVSS7.1AI score0.00333EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2025/10/24 9:32 p.m.25 views

CVE-2025-4106 WatchGuard Firebox leftover debug code vulnerability

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic command...

8.9CVSS0.00299EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2025/10/24 12:00 a.m.11 views

WatchGuard Fireware OS 安全漏洞

WatchGuard Fireware OS is a software from WatchGuard USA that runs on Firebox. A security vulnerability exists in WatchGuard Fireware OS version 12.0 through versions prior to 12.11.2, which originates from an administrator user being able to enable a debug shell by uploading a specific diagnosti...

8.9CVSS6.9AI score0.00299EPSS
SaveExploits0References2
VulnCheck KEV
VulnCheck KEV
added 2025/10/21 12:00 a.m.12 views

VulnCheck KEV: CVE-2025-9242

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability...

9.8CVSS6.1AI score0.913EPSS
SaveIn wildExploits5References6
The Hacker News
The Hacker News
added 2025/10/17 9:25 a.m.10 views

Researchers Uncover WatchGuard VPN Bug That Could Let Attackers Take Over Devices

Cybersecurity researchers have disclosed details of a recently patched critical security flaw in WatchGuard Fireware that could allow unauthenticated attackers to execute arbitrary code. The vulnerability, tracked as CVE-2025-9242 CVSS score: 9.3, is described as an out-of-bounds write...

9.8CVSS9.9AI score0.913EPSS
SaveExploits6
NCSC
NCSC
added 2025/10/17 8:19 a.m.17 views

Vulnerability fixed in WatchGuard Fireware OS

WatchGuard has fixed a vulnerability in Fireware OS Specific to certain VPN configurations. The vulnerability is in the way Fireware OS handles Out-of-bounds Write. This allows a malicious, unauthenticated attacker to execute arbitrary code. This could lead to serious consequences for affected...

9.8CVSS7.4AI score0.913EPSS
SaveExploits5References1
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2000-0883

Malware in sbrugna...

5CVSS6.4AI score0.0176EPSS
SaveExploits1References5
EUVD
EUVD
added 2025/10/07 12:30 a.m.10 views

EUVD-2001-0583

Malware in sbrugna...

5CVSS6.4AI score0.01345EPSS
SaveExploits1References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.8 views

EUVD-2018-2650

Malware in sbrugna...

9.8CVSS9.5AI score0.01302EPSS
SaveExploits2References3
Rows per page
Query Builder