Vulnerabilities > CVE-2017-8056 - XXE vulnerability in Watchguard Fireware 11.0.2/11.1/11.2.1

047910
CVSS 5.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
LOW
network
low complexity
watchguard
CWE-611
NVD
Published: 2017-04-22
Updated: 2024-11-21

Summary

WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.

Vulnerable Configurations

Part Description Count
OS
Watchguard
3

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/144242/wgfx-dos.txt
idPACKETSTORM:144242
last seen2017-09-19
published2017-09-19
reporterDavid Fernandez
sourcehttps://packetstormsecurity.com/files/144242/Watchguard-Firebox-XTM-XML-RPC-Empty-Member-Denial-Of-Service.html
titleWatchguard Firebox / XTM XML-RPC Empty Member Denial Of Service

References