Vulnerability · Published Sep 25, 2024 · Assigned by WatchGuard
CVE-2024-6594WatchGuard Firebox Single Sign-On Client Denial-of-Service
High 8.7
In plain English
A high-severity security flaw in SSO Client from WatchGuard. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities).
Severity (CVSS 4.0)8.7High
Exploit odds (30 days)0.6%top 49.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
Improper Handling of Exceptional Conditions vulnerability in the WatchGuard Single Sign-On Client on Windows causes the client to crash while handling malformed commands. An attacker with network access to the client could create a denial of service condition for the Single Sign-On service by repeatedly issuing malformed commands.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| WatchGuard | SSO Client | 12.0 – through 12.7 |
Weakness: CWE-755 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
References
- https://www.redteam-pentesting.de/advisories/rt-sa-2024-008 technical-description
- https://psirt.watchguard.com/CVE-2024-6594 vendor-advisory
- https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2024-00016 vendor-advisory