Watchguard vulnerabilities, page 5

180 vulnerabilities

Known vulnerabilities in Watchguard products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 51 products.

7.8HighCVE-2024-1417watchguard · authpoint password managerLocal Code Injection Vulnerability in AuthPoint Password Manager App for macOS SafariImproper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in WatchGuard AuthPoint Password Manager on MacOS allows an a adversary with local access to execute code under the context of the AuthPoint Password Manager application. This issue affects AuthPoint Password Manager for MacOS versions before 1.0.6.EPSS0.72%8.6HighCVE-2024-4944watchguard · mobile_vpn_with_ssl +1 moreMobile VPN with SSL Local Privilege Escalation VulnerabilityA local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.EPSS0.34%8.6HighCVE-2024-5974watchguard · fireware +1 moreFirebox Authenticated Buffer Overflow VulnerabilityA buffer overflow in WatchGuard Fireware OS could may allow an authenticated remote attacker with privileged management access to execute arbitrary code with system privileges on the firewall. This issue affects Fireware OS: from 11.9.6 through 12.10.3.EPSS1.05%9.3CriticalCVE-2024-6592watchguard · authentication_gateway +3 moreWatchGuard Firebox Single Sign-On Agent Protocol Authorization BypassAn incorrect authorization vulnerability in the protocol communication between the WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows and the WatchGuard Single Sign-On Client on Windows and MacOS allows an attacker with network access to forge communications to affected components. In the event an attacker has already gained network access, they could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or send arbitrary account and group information to the Single Sign-On Agent for their host. This vulnerability cannot be used by an attacker to gain access to user credentials.EPSS1.17%9.3CriticalCVE-2024-6593watchguard · authentication_gateway +1 moreWatchGuard Firebox Single Sign-On Agent Management Interface Authentication BypassIncorrect Authorization vulnerability in WatchGuard Authentication Gateway (aka Single Sign-On Agent) on Windows allows an attacker with network access to execute restricted management commands. An attacker that has already gained network access could exploit this vulnerability to retrieve authenticated usernames and group memberships from the Single Sign-On Agent or tamper with the agent configuration. This vulnerability cannot be used by an attacker to gain access to user credentials.EPSS0.58%8.7HighCVE-2024-6594watchguard · single_sign-on_client +1 moreWatchGuard Firebox Single Sign-On Client Denial-of-ServiceImproper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands.EPSS0.64%8.5HighCVE-2024-8424watchguard · endpoint_security +1 moreWatchGuard Endpoint Protection Privilege Escalation in PSANHost Enables Arbitrary File Delete as SYSTEMImproper Privilege Management vulnerability in WatchGuard EPDR, Panda AD360 and Panda Dome on Windows (PSANHost.exe module) allows arbitrary file delete with SYSTEM permissions.EPSS0.19%7.5HighCVE-2002-1047watchguard · soho_firewallwatchguard soho_firewallThe FTP service in Watchguard Soho Firewall 5.0.35a allows remote attackers to gain privileges with a correct password but an incorrect user name.EPSS1.35%5MediumCVE-2002-1046watchguard · firebox +1 morewatchguard fireboxDynamic VPN Configuration Protocol service (DVCP) in Watchguard Firebox firmware 5.x.x allows remote attackers to cause a denial of service (crash) via a malformed packet containing tab characters to TCP port 4110.EPSS1.74%7.5HighCVE-2002-1979watchguard · legacy_rssa +2 morewatchguard legacy_rssaWatchGuard SOHO products running firmware 5.1.6 and earlier, and Vclass/RSSA using 3.2 SP1 and earlier, allows remote attackers to bypass firewall rules by sending a PASV command string as the argument of another command to an FTP server, which generates a response that contains the string, causing IPFilter to treat the response as if it were a legitimate PASV command from the server.EPSS1.54%10CriticalCVE-2002-1520rapidstream +1 morerapidstream rapidstreamThe CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a -N option is provided during authentication, which allows remote attackers to access CLI with administrator privileges.EPSS2.77%10CriticalCVE-2002-1519rapidstream +1 morerapidstream rapidstreamFormat string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in the password parameter.EPSS4.28%5MediumCVE-2002-0527watchguard · soho_firewallwatchguard soho_firewallWatchguard SOHO firewall before 5.0.35 allows remote attackers to cause a denial of service (crash and reboot) when SOHO forwards a packet with bad IP options.EPSS1.63%10CriticalCVE-2002-0528watchguard · soho_firewallwatchguard soho_firewallWatchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrator upgrades to 5.0.35, which could allow remote attackers to bypass the intended access control rules.EPSS3.14%6.1MediumCVE-2019-18652watchguard · xmt515_firmwarewatchguard xmt515_firmwareA DOM based XSS vulnerability has been identified on the WatchGuard XMT515 through 12.1.3, allowing a remote attacker to execute JavaScript in the victim's browser by tricking the victim into clicking on a crafted link. The payload was tested in Microsoft Internet Explorer 11.418.18362.0 and Microsoft Edge 44.18362.387.0 (Microsoft EdgeHTML 18.18362).EPSS0.77%8.6HighCVE-2026-13722watchguard · fireware +1 moreWatchGuard Firebox Firmware Image Validation Bypass in WatchGuard Fireware OSWatchGuard Fireware OS contains a firmware validation bypass when processing a backup image via the backup/restore feature. An authenticated administrator can exploit this vulnerability to install a tampered firmware image.EPSS0.33%4.8MediumCVE-2026-13374watchguard · fireware +1 moreWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in ConnectWise Technology Integration ConfigurationImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (ConnectWise Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13937.EPSS0.27%8.6HighCVE-2026-13053watchguard · fireware +1 moreWatchGuard Firebox Authenticated Out of Bounds Write in Management CLI Command HandlerAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS's CLI could allow an authenticated privileged user to execute arbitrary code via a specially crafted CLI command.EPSS0.64%8.6HighCVE-2026-13384watchguard · fireware +1 moreWatchGuard Firebox wgagent Out of Bounds Write VulnerabilityAn Out-of-bounds Write vulnerability in WatchGuard Fireware OS wgagent process could allow an authenticated privileged user to execute arbitrary code via a specially crafted requests to the Management Web UI.EPSS0.72%4.8MediumCVE-2026-13373watchguard · fireware +1 moreWatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in Tigerpaw Technology Integration ConfigurationImproper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS (Tigerpaw Technology Integration module) allows Stored XSS. This vulnerability is an additional unmitigated attack path for CVE-2025-13936.EPSS0.27%