Skip to content

CVE · Exploited · On CISA KEV

CVE-2022-26318

WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

9.8
CVSS 3.1
1
story
MAR 25
added to KEV
Severity
9.8 Critical · NVD score
Vendor
WatchGuard
Product
Firebox and XTM Appliances
Published
Mar 4, 2022
Added to KEV
Mar 25, 2022
KEV deadline
Apr 15, 2022
Ransomware use
Unknown

What it is

On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.

From CISA's Known Exploited Vulnerabilities catalog

Decipher coverage · 1 story

Newest first ↑
  1. IntrusionsRussian Hackers Target Misconfigured Edge Devices in ‘Concerning Evolution’ For Critical Infrastructure AttacksAmazon researchers highlighted a “tactical pivot” by Russian GRU hackers who have been moving away from zero-day and N-day exploitation.LINDSEY O'DONNELL-WELCH · 2 MIN

Official references

5 sources

Registries

RegistryNVDScore, weakness and every referenceRegistryCVE.orgThe official CVE recordRegistryCISA KEVKnown exploited, with the federal deadline

Advisories, fixes & analysis

Fixwatchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.htmlFixwatchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html