CVE-2025-1545: WatchGuard Firebox XPath Injection Vulnerability in Web CGI
An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.This issue affects Fireware OS 11.11 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1545?
CVE-2025-1545 is considered a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2025-1545?
To mitigate CVE-2025-1545, update WatchGuard Fireware OS to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-1545?
CVE-2025-1545 affects specific versions of WatchGuard Fireware OS, including versions from 11.11 to 2025.1.2.
What type of attack can exploit CVE-2025-1545?
CVE-2025-1545 can be exploited through XPath Injection, allowing unauthorized access to sensitive configuration data.
Who can be affected by CVE-2025-1545?
Remote unauthenticated attackers may exploit CVE-2025-1545 to access sensitive information on affected Firebox systems.