Actively exploited · Published Feb 24, 2022 · Assigned by mitre
CVE-2022-23176
High 8.8 Exploited
In plain English
A high-severity security flaw in Firebox and XTM from WatchGuard. Attackers are actively exploiting it in the wild (listed by CISA on April 11, 2022). The chance it is exploited in the next 30 days is estimated at 10.9% (higher than 96% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by May 2, 2022.
Official description
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.
Affected products (as reported)
References
- https://securityportal.watchguard.com x_refsource_MISC
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7/index.html#Fireware/en-US/resolved_issues.html x_refsource_CONFIRM
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html x_refsource_MISC
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_1_3_U7/index.html#Fireware/en-US/resolved_issues.html x_refsource_MISC
- https://arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/ x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23176 government-resource