Watchguard

Fireware

69 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2025-13939

  • EPSS 0.19%
  • Veröffentlicht 04.12.2025 21:47:37
  • Zuletzt bearbeitet 10.08.2026 16:19:14

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Gateway Wireless Controller module) allows Stored XSS.

6.1

CVE-2025-13938

  • EPSS 0.19%
  • Veröffentlicht 04.12.2025 21:47:29
  • Zuletzt bearbeitet 10.08.2026 16:19:13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Autotask Technology Integration module) allows Stored XSS.

6.1

CVE-2025-13937

  • EPSS 0.19%
  • Veröffentlicht 04.12.2025 21:47:19
  • Zuletzt bearbeitet 10.08.2026 16:19:13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS.

6.1

CVE-2025-13936

  • EPSS 0.19%
  • Veröffentlicht 04.12.2025 21:45:51
  • Zuletzt bearbeitet 10.08.2026 16:19:13

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS.

7.2

CVE-2025-12196

  • EPSS 0.61%
  • Veröffentlicht 04.12.2025 21:45:29
  • Zuletzt bearbeitet 10.08.2026 16:19:13

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.

7.2

CVE-2025-12195

  • EPSS 0.68%
  • Veröffentlicht 04.12.2025 21:43:57
  • Zuletzt bearbeitet 10.08.2026 16:19:13

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.

7.2

CVE-2025-12026

  • EPSS 0.43%
  • Veröffentlicht 04.12.2025 21:43:46
  • Zuletzt bearbeitet 10.08.2026 16:19:13

An Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.

8.9

CVE-2025-4106

  • EPSS 0.31%
  • Veröffentlicht 24.10.2025 21:32:30
  • Zuletzt bearbeitet 08.08.2026 03:16:44

An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version-specific diagnostic package and executing a leftover diagnostic comma...

9.8

CVE-2025-9242

Warnung Medienbericht Exploit
  • EPSS 91.3%
  • Veröffentlicht 17.09.2025 07:29:23
  • Zuletzt bearbeitet 10.08.2026 19:59:12

An Out-of-bounds Write vulnerability in the WatchGuard Fireware OS iked process may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the mobile user VPN with IKEv2 and the branch office VPN using IKEv...

4.8

CVE-2025-6947

  • EPSS 0.48%
  • Veröffentlicht 15.09.2025 21:18:36
  • Zuletzt bearbeitet 08.08.2026 00:16:34

A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to ...