CVE-2013-6021

Watchguard Firewall XTM 11.7.4u1 - Remote Buffer Overflow

Severity Score

9.3

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.

Desbordamiento de buffer en WGagent de WatchGuard WSM y Fireware anterior a la versión 11.8 permite a atacantes remotos ejecutar código arbitrario a través de un valor largo de sessionid en una cookie.

*Credits: N/A

CVSS Scores

NISTv2 9.3

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2013-10-04 CVE Reserved
2013-10-19 CVE Published
2013-10-29 First Exploit
2023-10-18 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date

CWE

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

CAPEC

References (8)

URL	Tag	Source
http://osvdb.org/98752	Vdb Entry

URL	Date	SRC
https://www.exploit-db.com/exploits/29273	2013-10-29
http://www.exploit-db.com/exploits/29273	2024-08-06
http://www.securityfocus.com/bid/63227	2024-08-06
https://funoverip.net/2013/10/watchguard-cve-2013-6021-stack-based-buffer-overflow-exploit	2024-08-06

URL	Date	SRC
http://www.kb.cert.org/vuls/id/233990	2015-07-27

URL	Date	SRC
http://watchguardsecuritycenter.com/2013/10/17/watchguard-dimension-and-fireware-xtm-11-8	2015-07-27
http://watchguardsecuritycenter.com/2013/10/17/xtm-11-8-secfixes	2015-07-27

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				<= 11.7.4 Search vendor "Watchguard" for product "Fireware" and version " <= 11.7.4"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.0.2 Search vendor "Watchguard" for product "Fireware" and version "11.0.2"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.1 Search vendor "Watchguard" for product "Fireware" and version "11.1"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.2.3 Search vendor "Watchguard" for product "Fireware" and version "11.2.3"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.3 Search vendor "Watchguard" for product "Fireware" and version "11.3"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.3.6 Search vendor "Watchguard" for product "Fireware" and version "11.3.6"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.4 Search vendor "Watchguard" for product "Fireware" and version "11.4"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.4.2 Search vendor "Watchguard" for product "Fireware" and version "11.4.2"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.5.1 Search vendor "Watchguard" for product "Fireware" and version "11.5.1"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.5.3 Search vendor "Watchguard" for product "Fireware" and version "11.5.3"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.6.6 Search vendor "Watchguard" for product "Fireware" and version "11.6.6"		-		Affected
Watchguard Search vendor "Watchguard"		Fireware Search vendor "Watchguard" for product "Fireware"				11.7.2 Search vendor "Watchguard" for product "Fireware" and version "11.7.2"		-		Affected