Watchguard

Fireware

69 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-31789

  • EPSS 1.55%
  • Veröffentlicht 06.09.2022 19:15:08
  • Zuletzt bearbeitet 21.11.2024 07:05:19

An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fi...

7.5

CVE-2022-31790

Exploit
  • EPSS 1.59%
  • Veröffentlicht 06.09.2022 18:15:15
  • Zuletzt bearbeitet 21.11.2024 07:05:19

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and ...

9.1

CVE-2022-25361

  • EPSS 1.24%
  • Veröffentlicht 07.06.2022 14:15:09
  • Zuletzt bearbeitet 21.11.2024 06:52:04

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x throu...

9.8

CVE-2022-26318

Warnung
  • EPSS 78.16%
  • Veröffentlicht 04.03.2022 18:15:08
  • Zuletzt bearbeitet 13.11.2025 15:06:59

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

6.5

CVE-2022-25363

  • EPSS 0.9%
  • Veröffentlicht 24.02.2022 15:15:31
  • Zuletzt bearbeitet 21.11.2024 06:52:04

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x th...

8.8

CVE-2022-25360

  • EPSS 1.31%
  • Veröffentlicht 24.02.2022 15:15:31
  • Zuletzt bearbeitet 21.11.2024 06:52:04

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5...

8.8

CVE-2022-25293

  • EPSS 2.11%
  • Veröffentlicht 24.02.2022 15:15:31
  • Zuletzt bearbeitet 21.11.2024 06:51:56

A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fi...

8.8

CVE-2022-25292

  • EPSS 2.11%
  • Veröffentlicht 24.02.2022 15:15:31
  • Zuletzt bearbeitet 21.11.2024 06:51:56

A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fi...

8.8

CVE-2022-25291

  • EPSS 1.8%
  • Veröffentlicht 24.02.2022 15:15:31
  • Zuletzt bearbeitet 21.11.2024 06:51:56

An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This v...

6.5

CVE-2022-25290

  • EPSS 0.7%
  • Veröffentlicht 24.02.2022 15:15:30
  • Zuletzt bearbeitet 21.11.2024 06:51:56

WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x...