CVE-2022-31790
First published: Tue Sep 06 2022(Updated: )
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| WatchGuard Fireware | >=12.0.0<12.1.4 | |
| WatchGuard Fireware | >=12.2.0<12.5.10 | |
| WatchGuard Fireware | =12.6.1-u1 | |
| WatchGuard Fireware | =12.6.1-u3 | |
| WatchGuard Fireware | =12.6.3 | |
| WatchGuard Fireware | =12.6.4 | |
| WatchGuard Fireware | =12.7.0-u1 | |
| WatchGuard Fireware | =12.7.1 | |
| WatchGuard Fireware | =12.7.2-u2 | |
| WatchGuard Fireware | =12.8.0-u1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-31790.
What is the severity of CVE-2022-31790?
The severity of CVE-2022-31790 is high.
Which software versions are affected by CVE-2022-31790?
WatchGuard Firebox and XTM appliances running Fireware versions between 12.0.0 and 12.8.0-u1 are affected by CVE-2022-31790.
How can an attacker exploit CVE-2022-31790?
An unauthenticated remote attacker can exploit CVE-2022-31790 by sending a malicious request to exposed authentication endpoints in WatchGuard Firebox and XTM appliances.
Has CVE-2022-31790 been fixed?
Yes, CVE-2022-31790 has been fixed in Fireware OS versions 12.8.1, 12.5.10, and 12.1.4.
- collector/nvd-index
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/description
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/watchguard
- canonical/watchguard fireware
- version/watchguard fireware/12.0.0
- version/watchguard fireware/12.2.0
- version/watchguard fireware/12.6.1-u1
- version/watchguard fireware/12.6.1-u3
- version/watchguard fireware/12.6.3
- version/watchguard fireware/12.6.4
- version/watchguard fireware/12.7.0-u1
- version/watchguard fireware/12.7.1
- version/watchguard fireware/12.7.2-u2
- version/watchguard fireware/12.8.0-u1