CVE-2022-25363: Medium severity watchguard fireware os vulnerability
Published Feb 24, 2022
·Updated
WatchGuard Firebox and XTM appliances allow an authenticated remote attacker with unprivileged credentials to modify privileged management user credentials. This vulnerability impacts Fireware OS before 12.7.2U2, 12.x before 12.1.3U8, and 12.2.x through 12.5.x before 12.5.9U2.
Affected Software
15 affected components
WatchGuard Fireware>=12.0.0<12.1.3
WatchGuard Fireware>=12.2.0<12.5.9
WatchGuard Fireware>=12.7.0<12.7.2
WatchGuard Fireware=12.1.3
WatchGuard Fireware=12.1.3-u1
WatchGuard Fireware=12.1.3-u2
WatchGuard Fireware=12.1.3-u3
WatchGuard Fireware=12.1.3-u4
WatchGuard Fireware=12.1.3-u5
WatchGuard Fireware=12.1.3-u6
WatchGuard Fireware=12.1.3-u7
WatchGuard Fireware=12.5.9
WatchGuard Fireware=12.5.9-u1
WatchGuard Fireware=12.7.2
WatchGuard Fireware=12.7.2-u1
Event History
Feb 24, 2022
CVE Published
via MITRE·04:56 AM
Data Sourced
via MITRE·04:56 AM
Description
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2022-25363.
2
What is the severity of CVE-2022-25363?
The severity of CVE-2022-25363 is medium.
3
Which software versions are affected by CVE-2022-25363?
CVE-2022-25363 impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
4
How can an attacker exploit CVE-2022-25363?
An authenticated remote attacker with unprivileged credentials can exploit CVE-2022-25363 to modify privileged management user credentials.
5
Is there a fix available for CVE-2022-25363?
Yes, the fix for CVE-2022-25363 is available in Fireware OS 12.7.2_U2, 12.1.3_U8, and 12.5.9_U2.