Watchguard vulnerabilities, page 3

178 vulnerabilities

Known vulnerabilities in Watchguard products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.

4.8MediumCVE-2025-6947watchguard · fireware osWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in SIP Proxy ConfigurationA stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management interface of another management user.EPSS0.48%4.8MediumCVE-2025-6946watchguard · fireware +1 moreWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS ConfigurationA stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker with administrator privileges could exploit this vulnerability to execute arbitrary JavaScript code in the Firebox management ninterface of another management user.EPSS0.24%8.6HighCVE-2025-12195watchguard · fireware +1 moreWatchGuard Firebox Authenticated Out of Bounds Write in Management CLI IPSec ConfigurationAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via specially crafted IPSec configuration CLI commands.EPSS0.69%8.6HighCVE-2025-12026watchguard · fireware +1 moreWatchGuard Firebox Authenticated Out of Bounds Write in certdAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS’s certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.EPSS0.44%8.6HighCVE-2025-12196watchguard · fireware +1 moreWatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Ping CommandAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.EPSS0.62%7.5HighCVE-2020-10532watchguard · ad_helper_firmwarewatchguard ad_helper_firmwareThe AD Helper component in WatchGuard Fireware before 5.8.5.10317 allows remote attackers to discover cleartext passwords via the /domains/list URI.EPSS2.79%4.3MediumCVE-2014-0338watchguard · firewarewatchguard firewareMultiple cross-site scripting (XSS) vulnerabilities in the firewall policy management pages in WatchGuard Fireware XTM before 11.8.3 allow remote attackers to inject arbitrary web script or HTML via the pol_name parameter.EPSS1.55%6.1MediumCVE-2014-6413watchguard · fireware_xtmwatchguard fireware_xtmA Cross-site Scripting (XSS) vulnerability exists in WatchGuard XTM 11.8.3 via the poll_name parameter in the firewall/policy script.EPSS1.25%7.5HighCVE-2001-0692watchguard · firebox_2500 +1 morewatchguard firebox_2500SMTP proxy in WatchGuard Firebox (2500 and 4500) 4.5 and 4.6 allows a remote attacker to bypass firewall filtering via a base64 MIME encoded email attachment whose boundary name ends in two dashes.EPSS1.79%5MediumCVE-2001-0049watchguard · soho_firewallwatchguard soho_firewallWatchGuard SOHO FireWall 2.2.1 and earlier allows remote attackers to cause a denial of service via a large number of GET requests.EPSS3.10%10CriticalCVE-2001-0203watchguard · firebox_iiwatchguard firebox_iiWatchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a file that contains hashed passphrases, and using the hashes during authentication.EPSS2.30%5MediumCVE-2001-0592watchguard · firebox_iiwatchguard firebox_iiWatchguard Firebox II prior to 4.6 allows a remote attacker to create a denial of service in the kernel via a large stream (>10,000) of malformed ICMP or TCP packets.EPSS1.34%5MediumCVE-2008-1618watchguard · firebox_pptp_vpnwatchguard firebox_pptp_vpnThe PPTP VPN service in Watchguard Firebox before 10, when performing the MS-CHAPv2 authentication handshake, generates different error codes depending on whether the username is valid or invalid, which allows remote attackers to enumerate valid usernames.EPSS1.74%9.8CriticalCVE-2022-26318watchguard · firewarewatchguard firewareOn WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.KEVEPSS78.16%7.8HighCVE-2022-31791watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow a local attacker (that has already obtained shell access) to elevate their privileges and execute code with root permissions. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.EPSS0.23%9.8CriticalCVE-2022-31789watchguard · firewarewatchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potentially execute arbitrary code by sending a malicious request to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.EPSS1.87%7.5HighCVE-2022-31790watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.EPSS1.95%5.4MediumCVE-2022-31792watchguard · firewarewatchguard firewareA stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.EPSS0.59%6.5MediumCVE-2022-31749watchguard · fireware osAuthenticated arbitrary file read/write in WatchGuard Fireware OSAn argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM appliancesEPSS1.26%8.8HighCVE-2022-25293watchguard · firewarewatchguard firewareA systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS2.11%