high8.8
CVE-2022-25360
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations.
Impact
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to upload files to arbitrary locations. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Watchguard | Fireware | from 12.0.0 before 12.1.3 from 12.2.0 before 12.5.9 from 12.7.0 before 12.7.2 Versions 12.1.3, 12.5.9, 12.7.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html