Watchguard vulnerabilities
178 vulnerabilities
Known vulnerabilities in Watchguard products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.
Products
50 of 51- Fireware75 vulnerabilities
- Fireware OS74 vulnerabilities
- Dimension17 vulnerabilities
- Soho Firewall8 vulnerabilities
- Watchguard Agent7 vulnerabilities
- Agent5 vulnerabilities
- Mobile VPN With SSL Client5 vulnerabilities
- Ap1004 vulnerabilities
- Ap1024 vulnerabilities
- Ap2004 vulnerabilities
- Edr4 vulnerabilities
- Epdr4 vulnerabilities
- Epp4 vulnerabilities
- Firebox4 vulnerabilities
- Panda Ad3604 vulnerabilities
- Authentication Gateway3 vulnerabilities
- Firebox Ii3 vulnerabilities
- Watchguard AP3 vulnerabilities
- Xcs3 vulnerabilities
- Ap3002 vulnerabilities
- Endpoint Security2 vulnerabilities
- Mobile Vpn With Ssl2 vulnerabilities
- Panda Antivirus2 vulnerabilities
- Panda Dome2 vulnerabilities
- Serverlock2 vulnerabilities
- Single Sign On Client2 vulnerabilities
- SSO Agent2 vulnerabilities
- SSO Client2 vulnerabilities
- Ad Helper1 vulnerabilities
- Authpoint Authentication Gateway1 vulnerabilities
- Authpoint Password Manager1 vulnerabilities
- Firebox 25001 vulnerabilities
- Firebox 45001 vulnerabilities
- Firebox Pptp Vpn1 vulnerabilities
- Fireware Xtm1 vulnerabilities
- Hawkeye G1 vulnerabilities
- Legacy Rssa1 vulnerabilities
- Panda Endpoint Administration Agent1 vulnerabilities
- Panda Mobile Security1 vulnerabilities
- Panda Security Vpn1 vulnerabilities
- Panda Url Filtering1 vulnerabilities
- Rapidstream1 vulnerabilities
- Server Center1 vulnerabilities
- Soho1 vulnerabilities
- SSO Terminal Services Agent1 vulnerabilities
- Vclass1 vulnerabilities
- Watchguard System Manager1 vulnerabilities
- Xmt5151 vulnerabilities
- Firebox and XTM0 vulnerabilities
- Firebox and XTM Appliances0 vulnerabilities
CVE-2018-10575watchguardap100_firmware+2
EPSS score8.38%
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Hardcoded credentials exist for an unprivileged SSH account with a shell of /bin/false.CVE-2018-10576watchguardap100_firmware+2EPSS score1.47%
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15. Improper authentication handling by the native Access Point web UI allows authentication using a local system account (instead of the dedicated web-only user).CVE-2018-10577watchguardap100_firmware+3EPSS score6.37%
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. File upload functionality allows any users authenticated on the web interface to upload files containing code to the web root, allowing these files to be executed as root.CVE-2018-10578watchguardap100_firmware+3EPSS score1.26%
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10. Incorrect validation of the "old password" field in the change password form allows an attacker to bypass validation of this field.CVE-2003-0642watchguardserverlockEPSS score0.35%
WatchGuard ServerLock for Windows 2000 before SL 2.0.4 allows local users to access kernel memory via a symlink attack on \Device\PhysicalMemory.CVE-2003-0641watchguardserverlockEPSS score0.36%
WatchGuard ServerLock for Windows 2000 before SL 2.0.3 allows local users to load arbitrary modules via the OpenProcess() function, as demonstrated using (1) a DLL injection attack, (2) ZwSetSystemInformation, and (3) API hooking in OpenProcess.CVE-2013-5702watchguardfireware+1EPSS score0.97%
Multiple cross-site scripting (XSS) vulnerabilities in WebCenter in WatchGuard WSM and Fireware before 11.8 allow remote attackers to inject arbitrary web script or HTML via unspecified parameters.CVE-2013-5701watchguardserver_centerEPSS score1.04%
Multiple untrusted search path vulnerabilities in (1) Watchguard Log Collector (wlcollector.exe) and (2) Watchguard WebBlocker Server (wbserver.exe) in WatchGuard Server Center 11.7.4, 11.7.3, and possibly earlier allow local users to gain privileges via a Trojan horse wgpr.dll file in the application's bin directory.CVE-2013-6021watchguardfirewareEPSS score11.73%
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.CVE-2021-34998panda securityfree antivirus+1EPSS score0.37%
This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the use of named pipes. The issue results from allowing an untrusted process to impersonate the client of a pipe. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-14208.CVE-2015-2878watchguardhawkeye_gEPSS score4.17%
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication of administrators for requests that (1) add arbitrary accounts via the name parameter to interface/rest/accounts/json; turn off the (2) Url matching, (3) DNS Inject, or (4) IP Redirect Sensor in a request to interface/rest/dpi/setEnabled/1; or (5) perform whitelisting of malware MD5 hash IDs via the id parameter to interface/rest/md5-threats/whitelist.CVE-2015-7378watchguardpanda_url_filteringEPSS score0.85%
Panda Security URL Filtering before 4.3.1.9 uses a weak ACL for the "Panda Security URL Filtering" directory and installed files, which allows local users to gain SYSTEM privileges by modifying Panda_URL_Filteringb.exe.CVE-2015-5453watchguardxcsEPSS score58.42%
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.CVE-2015-5452watchguardxcsEPSS score3.39%
SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.CVE-2016-7089watchguardrapidstreamEPSS score1.24%
WatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary commands via a crafted ifconfig command, aka ESCALATEPLOWMAN.CVE-2016-6154watchguardfirewareEPSS score0.94%
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).CVE-2016-3943watchguardpanda_endpoint_administration_agentEPSS score1.18%
Panda Endpoint Administration Agent before 7.50.00, as used in Panda Security for Business products for Windows, uses a weak ACL for the Panda Security/WaAgent directory and sub-directories, which allows local users to gain SYSTEM privileges by modifying an executable module.CVE-2025-2782watchguardsso terminal services agentEPSS score0.15%
The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.CVE-2025-2781watchguardmobile vpn with ssl clientEPSS score0.14%
The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.CVE-2025-13936watchguardfireware+1EPSS score0.20%
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS.