Vulnerabilities > CVE-2022-31790 - Unspecified vulnerability in Watchguard Fireware

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

network

low complexity

watchguard

NVD

Published: 2022-09-06

Updated: 2022-09-10

Summary

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Vulnerable Configurations

Part	Description	Count
OS	Watchguard Watchguard Fireware 12.8.0 Watchguard Fireware 12.7.2 Watchguard Fireware 12.7.1 Watchguard Fireware 12.7.0 Watchguard Fireware 12.6.3 Watchguard Fireware 12.6.4 Watchguard Fireware 12.6.1 Watchguard Fireware 12.2.0 Watchguard Fireware 12.5.7 Watchguard Fireware 12.5.9 Watchguard Fireware 12.0.0 Watchguard Fireware 12.1.3	24

References

https://www.openwall.com/lists/oss-security/2022/08/30/2
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00017
https://www.ambionics.io/blog/hacking-watchguard-firewalls