CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2025-0178 – WatchGaurd Firebox Host Header Injection Vulnerability
https://notcve.org/view.php?id=CVE-2025-0178
14 Feb 2025 — Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI. This issue affects Fireware OS: from 12.0 up to and including 12.11. Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the v... • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003 • CWE-20: Improper Input Validation •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2025-1239 – WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Blocked Sites List
https://notcve.org/view.php?id=CVE-2025-1239
14 Feb 2025 — Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the Blocked Sites list. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11. • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00002 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 5.4EPSS: 0%CPEs: 2EXPL: 0CVE-2025-1071 – WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
https://notcve.org/view.php?id=CVE-2025-1071
14 Feb 2025 — Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11. • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00001 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 6.8EPSS: 0%CPEs: 1EXPL: 2CVE-2022-31749 – Authenticated arbitrary file read/write in WatchGuard Fireware OS
https://notcve.org/view.php?id=CVE-2022-31749
27 Jan 2025 — An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM appliances • https://github.com/jbaines-r7/hook • CWE-88: Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') •
CVSS: 8.3EPSS: 0%CPEs: 2EXPL: 0CVE-2024-5974 – Firebox Authenticated Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2024-5974
09 Jul 2024 — A buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3. Un desbordamiento del búfer en WatchGuard Fireware OS podría permitir que un atacante remoto autenticado con acceso de administración privilegiado ejecute código arbitrario con privilegios del sistema en el firewall. Este problema afecta al sistema operativo... • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00011 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 0CVE-2022-31791
https://notcve.org/view.php?id=CVE-2022-31791
06 Sep 2022 — WatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4. Los dispositivos WatchGuard Firebox y XTM permiten a un atacante local (que ya ha obtenido acceso al shell) elevar sus privilegios y ejecutar código con permisos de root. Esto ha sido corregido en Fireware OS versiones 12.8.1, 12.5.10 y 12.1.4. • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00018 •
CVSS: 5.5EPSS: 0%CPEs: 10EXPL: 0CVE-2022-31792
https://notcve.org/view.php?id=CVE-2022-31792
06 Sep 2022 — A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4. Se presenta una vulnerabilidad de tipo cross-site scripting (XSS) almacenado en la interfaz web de administración de los dispositivos WatchGuard Firebox y XTM. Un ata... • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00014 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 10.0EPSS: 0%CPEs: 10EXPL: 0CVE-2022-31789
https://notcve.org/view.php?id=CVE-2022-31789
06 Sep 2022 — An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4. Un desbordamiento de enteros en los dispositivos WatchGuard Firebox y XTM permite a un atacante remoto no autenticado desencadenar un desbordamiento de búfer y potencialmente ejecutar código arbitrario enviando una petición... • https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00015 • CWE-190: Integer Overflow or Wraparound •
CVSS: 7.8EPSS: 0%CPEs: 10EXPL: 1CVE-2022-31790
https://notcve.org/view.php?id=CVE-2022-31790
06 Sep 2022 — WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4. Los dispositivos WatchGuard Firebox y XTM permiten a un atacante remoto no autenticado recuperar configuraciones confidenciales del servidor de autenticación mediante el envío de una petición maliciosa a los endpoints de autenticación expuestos. Esto ha ... • https://www.ambionics.io/blog/hacking-watchguard-firewalls •
CVSS: 9.1EPSS: 0%CPEs: 60EXPL: 0CVE-2022-25361
https://notcve.org/view.php?id=CVE-2022-25361
07 Jun 2022 — WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2. Los dispositivos WatchGuard Firebox y XTM permiten a un atacante remoto no autenticado eliminar archivos arbitrarios de un conjunto limitado de directorios en el sistema. Esta vulnerabilidad afecta a Fireware OS versiones anteriores a... • https://watchguard.com •