Vulnerability · Published Feb 14, 2025 · Assigned by WatchGuard

CVE-2025-0178WatchGaurd Firebox Host Header Injection Vulnerability

Medium 5.1

In plain English

A medium-severity improper input validation in Fireware OS from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).

Severity (CVSS 4.0)5.1Medium

Exploit odds (30 days)0.2%top 85.2% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.

Affected products (as reported)

Vendor	Product	Versions
WatchGuard	Fireware OS	12.0 – before 12.11.1
WatchGuard	Fireware OS	12.0 – before 12.5.13

Weakness: CWE-20 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L

References

https://psirt.watchguard.com/CVE-2025-0178 vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003 vendor-advisory