WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
References
| Link | Resource |
|---|---|
| https://watchguard.com | Vendor Advisory |
| https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004 | Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
History
14 Jun 2022, 17:53
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:h:watchguard:firebox_xtm1520-rp:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u5:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t15-w:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.5.9:-:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u2:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t10-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm1525-rp:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.5.9:u1:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t10:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:xtmv:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:-:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u6:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m200:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u7:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m300:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t35-r:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t50-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm870-f:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm850:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm2520:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t50:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t55-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t10-d:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t30:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.7.2:-:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t30-w:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.7.2:u1:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u3:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m400:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t20-w:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u1:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t40-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:* cpe:2.3:o:watchguard:fireware:12.1.3:u4:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t35-w:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m500:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm860:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_xtm870:-:*:*:*:*:*:*:* cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : 6.4
v3 : 9.1 |
| CWE | NVD-CWE-noinfo | |
| References | (MISC) https://watchguard.com - Vendor Advisory | |
| References | (MISC) https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004 - Vendor Advisory |
07 Jun 2022, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-06-07 14:15
Updated : 2024-02-04 22:29
NVD link : CVE-2022-25361
Mitre link : CVE-2022-25361
CVE.ORG link : CVE-2022-25361
JSON object : View
Products Affected
watchguard
- firebox_xtm870
- firebox_t55-w
- firebox_t10
- firebox_m500
- firebox_m390
- firebox_m690
- firebox_xtm850
- firebox_m4800
- firebox_t20-w
- firebox_t15-w
- firebox_t10-w
- firebox_t40
- firebox_xtm2520
- firebox_t30
- firebox_m670
- firebox_m290
- firebox_t10-d
- firebox_t50
- firebox_t55
- firebox_m270
- firebox_t70
- firebox_xtm1525-rp
- fireboxcloud
- xtmv
- firebox_m440
- firebox_m5800
- firebox_m470
- firebox_m590
- firebox_xtm870-f
- firebox_m300
- firebox_m400
- firebox_xtm1520-rp
- firebox_t35-w
- firebox_t40-w
- fireboxv
- firebox_m200
- firebox_t50-w
- firebox_t20
- firebox_m570
- firebox_t35
- firebox_t80
- firebox_xtm860
- firebox_m370
- firebox_t30-w
- fireware
- firebox_t15
- firebox_t35-r
CWE