9.8

CVE-2022-26318

Warnung
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Watchguard ≫ Fireware Version >= 12.0.0 < 12.1.3
Watchguard ≫ Fireware Version >= 12.5 < 12.5.9
Watchguard ≫ Fireware Version >= 12.7.0 < 12.7.2
Watchguard ≫ Fireware Version 12.1.3
Watchguard ≫ Fireware Version 12.1.3 Update u1
Watchguard ≫ Fireware Version 12.1.3 Update u2
Watchguard ≫ Fireware Version 12.1.3 Update u3
Watchguard ≫ Fireware Version 12.1.3 Update u4
Watchguard ≫ Fireware Version 12.1.3 Update u5
Watchguard ≫ Fireware Version 12.1.3 Update u6
Watchguard ≫ Fireware Version 12.1.3 Update u7
Watchguard ≫ Fireware Version 12.5.9 Update u1
Watchguard ≫ Fireware Version 12.7.2 Update u1

25.03.2022: CISA Known Exploited Vulnerabilities (KEV) Catalog

WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

Schwachstelle

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.

Beschreibung

Apply updates per vendor instructions.

Erforderliche Maßnahmen
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 78.16% 0.995
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CISA-ADP 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html
Vendor Advisory
Release Notes
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26318
US Government Resource