CVE-2017-14616: watchguard fireware Uncontrolled Resource Consumption
Vulnerability summary
CVE-2017-14616 is a high (CVSS 7.8) Uncontrolled Resource Consumption vulnerability in watchguard fireware. EPSS estimates a 1.64% chance of exploitation in the next 30 days, higher than 76.1% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 20-09-2017PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
An FBX-5312 issue was discovered in WatchGuard Fireware before 12.0. If a login attempt is made in the XML-RPC interface with an XML message containing an empty member element, the wgagent crashes, logging out any user with a session opened in the UI. By continuously executing the failed login attempts, UI management of the device becomes impossible.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
1.64%
Chance of exploitation in the next 30 days
Percentile
76%
Versus all other CVEs
30-day change
+0.13 pp
From 1.52% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (sidertia.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Watchguard1 product
- fireware≤ 11.12.4
1 vendor · 1 product