CVE-2025-1545: WatchGuard Firebox XPath Injection Vulnerability in Web CGI
An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 2025.1.3 - Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 12.11.5 - Upgrade
Upgrade
WatchGuard Fireware OSto a version that resolves this vulnerability.Fixed in 12.5.14
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1545?
CVE-2025-1545 is considered a high-severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2025-1545?
To mitigate CVE-2025-1545, update WatchGuard Fireware OS to the latest version that addresses this vulnerability.
What systems are affected by CVE-2025-1545?
CVE-2025-1545 affects specific versions of WatchGuard Fireware OS, including versions from 11.11 to 2025.1.2.
What type of attack can exploit CVE-2025-1545?
CVE-2025-1545 can be exploited through XPath Injection, allowing unauthorized access to sensitive configuration data.
Who can be affected by CVE-2025-1545?
Remote unauthenticated attackers may exploit CVE-2025-1545 to access sensitive information on affected Firebox systems.