CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Reset
Showing 1โ€“1 of 1 advisories (Page 1/1)
CVE-2022-231768.8/HIGHEPSS 10.9%CISA KEV
2022-02-24

WatchGuard Firebox & XTM Privilege Escalation Vulnerability (CVE-2022-23176) Security Advisory

[Affected Scope] WatchGuard Firebox and XTM appliances running Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3

[Impact] A remote attacker with low-privileged credentials can exploit exposed management access to elevate privileges and establish a fully privileged management session

[Mitigation] Immediately upgrade Fireware OS to the patched versions and restrict management interface access from the external internet

CVE Vulnerability Advisory Database (CVSS ยท CISA KEV ยท EPSS) | CVE Pulse