CVE-2022-25290: Medium severity watchguard fireware os vulnerability
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-25290?
CVE-2022-25290 is a vulnerability that allows an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys in WatchGuard Firebox and XTM appliances before certain versions of Fireware OS.
How does CVE-2022-25290 impact WatchGuard Firebox and XTM appliances?
CVE-2022-25290 allows an authenticated remote attacker with unprivileged credentials to retrieve certificate private keys in certain versions of WatchGuard Firebox and XTM appliances.
What is the severity of CVE-2022-25290?
The severity of CVE-2022-25290 is medium with a severity value of 6.5.
Which versions of Fireware OS are affected by CVE-2022-25290?
CVE-2022-25290 impacts Fireware OS versions before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
How can I fix CVE-2022-25290 in WatchGuard Firebox and XTM appliances?
To fix CVE-2022-25290, you should update Fireware OS to version 12.7.2_U2, 12.1.3_U8, or 12.5.9_U2 or later.