Watchguard vulnerabilities, page 4

178 vulnerabilities

Known vulnerabilities in Watchguard products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.

8.8HighCVE-2022-25292watchguard · firewarewatchguard firewareA wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS2.11%6.5MediumCVE-2022-25290watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS0.70%8.8HighCVE-2022-25360watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS1.31%8.8HighCVE-2022-25291watchguard · firewarewatchguard firewareAn integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow and potentially execute arbitrary code by initiating a firmware update with a malicious upgrade image. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS1.80%6.5MediumCVE-2022-25363watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS0.90%9.1CriticalCVE-2022-25361watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.EPSS1.30%9CriticalCVE-2022-23176watchguard · firewarewatchguard firewareWatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.KEVEPSS10.80%5MediumCVE-2000-1182watchguard · firebox_iiwatchguard firebox_iiWatchGuard Firebox II allows remote attackers to cause a denial of service by flooding the Firebox with a large number of FTP or SMTP requests, which disables proxy handling.EPSS1.76%5MediumCVE-2000-0896watchguard · soho_firewallwatchguard soho_firewallWatchGuard SOHO firewall allows remote attackers to cause a denial of service via a flood of fragmented IP packets, which causes the firewall to drop connections and stop forwarding packets.EPSS1.76%5MediumCVE-2000-0783watchguard · fireboxwatchguard fireboxWatchguard Firebox II allows remote attackers to cause a denial of service by sending a malformed URL to the authentication service on port 4100.EPSS1.77%10CriticalCVE-2000-0895watchguard · soho_firewallwatchguard soho_firewallBuffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.EPSS6.21%10CriticalCVE-2000-0894watchguard · soho_firewallwatchguard soho_firewallHTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooting, which allows attackers to cause a denial of service or conduct unauthorized activities.EPSS1.95%6.8MediumCVE-2011-2165watchguard · xcswatchguard xcsThe STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.EPSS5.16%7.8HighCVE-2017-14616watchguard · firewarewatchguard firewareAn FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login attempts, UI management of the device becomes impossible.EPSS1.64%6.1MediumCVE-2017-14615watchguard · firewarewatchguard firewareAn FBX-5313 issue was discovered in WatchGuard Fireware before 12.0. When a failed login attempt is made to the login endpoint of the XML-RPC interface, if JavaScript code, properly encoded to be consumed by XML parsers, is embedded as value of the user element, the code will be rendered in the context of any logged in user in the Web UI visiting "Traffic Monitor" sections "Events" and "All." As a side effect, no further events will be visible in the Traffic Monitor until the device is restarted.EPSS0.95%5.3MediumCVE-2017-8056watchguard · firewarewatchguard firewareWatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.EPSS5.08%5.9MediumCVE-2017-8060watchguard · panda_mobile_securitywatchguard panda_mobile_securityAcceptance of invalid/self-signed TLS certificates in "Panda Mobile Security" 1.1 for iOS allows a man-in-the-middle and/or physically proximate attacker to silently intercept information sent during the login API call.EPSS0.66%5.3MediumCVE-2017-8055watchguard · firewarewatchguard firewareWatchGuard Fireware allows user enumeration, e.g., in the Firebox XML-RPC login handler. A login request that contains a blank password sent to the XML-RPC agent in Fireware v11.12.1 and earlier returns different responses for valid and invalid usernames. An attacker could exploit this vulnerability to enumerate valid usernames on an affected Firebox.EPSS1.59%5.5MediumCVE-2017-8339watchguard · panda_antiviruswatchguard panda_antivirusPSKMAD.sys in Panda Free Antivirus 18.0 allows local users to cause a denial of service (BSoD) via a crafted DeviceIoControl request to \\.\PSMEMDriver.EPSS0.45%7.8HighCVE-2024-13043panda security · dome +1 morePanda Security Dome Link Following Local Privilege Escalation VulnerabilityThis vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Hotspot Shield. By creating a junction, an attacker can abuse the application to delete arbitrary files. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code in the context of SYSTEM. Was ZDI-CAN-23478.EPSS0.28%