Vulnerability Intelligence Report
CVE-2022-25361
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
No Active Exploit Signals
CVSS Base Score
9.1
CRITICAL
EPSS Probability:1.21%
Executive Threat Verdict
Evaluating...
Evaluating Threat Landscape...
Assessing known weaponization, exploitation telemetry, and federal advisories.
Attack Surface
—
Authentication
—
Weaponization
—
SSVC Action
—
Affected Products & Versions
| Vendor | Product | Affected Versions |
|---|---|---|
| watchguard | fireware | 12.1.3, 12.5.9, 12.7.2 |
| watchguard | firebox_m200 | all |
| watchguard | firebox_m270 | all |
| watchguard | firebox_m290 | all |
| watchguard | firebox_m300 | all |
| watchguard | firebox_m370 | all |
| watchguard | firebox_m390 | all |
| watchguard | firebox_m400 | all |
| watchguard | firebox_m440 | all |
| watchguard | firebox_m470 | all |
| watchguard | firebox_m4800 | all |
| watchguard | firebox_m500 | all |
| watchguard | firebox_m570 | all |
| watchguard | firebox_m5800 | all |
| watchguard | firebox_m590 | all |
| watchguard | firebox_m670 | all |
| watchguard | firebox_m690 | all |
| watchguard | firebox_t10 | all |
| watchguard | firebox_t10-d | all |
| watchguard | firebox_t10-w | all |
| watchguard | firebox_t15 | all |
| watchguard | firebox_t15-w | all |
| watchguard | firebox_t20 | all |
| watchguard | firebox_t20-w | all |
| watchguard | firebox_t30 | all |
| watchguard | firebox_t30-w | all |
| watchguard | firebox_t35 | all |
| watchguard | firebox_t35-r | all |
| watchguard | firebox_t35-w | all |
| watchguard | firebox_t40 | all |
| watchguard | firebox_t40-w | all |
| watchguard | firebox_t50 | all |
| watchguard | firebox_t50-w | all |
| watchguard | firebox_t55 | all |
| watchguard | firebox_t55-w | all |
| watchguard | firebox_t70 | all |
| watchguard | firebox_t80 | all |
| watchguard | firebox_xtm1520-rp | all |
| watchguard | firebox_xtm1525-rp | all |
| watchguard | firebox_xtm2520 | all |
| watchguard | firebox_xtm850 | all |
| watchguard | firebox_xtm860 | all |
| watchguard | firebox_xtm870 | all |
| watchguard | firebox_xtm870-f | all |
| watchguard | fireboxcloud | all |
| watchguard | fireboxv | all |
| watchguard | xtmv | all |
References & Technical Advisories
No reference links found.
Threat Intelligence Signals
EPSS Score
1.209%
GitHub Advisory
Identity & Timeline
| Status | PUBLISHED |
| Assigning Authority | MITRE Corporation · N/A · USA |
| Reserved | 2022-02-18T00:00:00 |
| Published | 2022-06-07T13:26:39 |
| Last Updated | 2024-08-03T04:36:06 |
Community Chatter & Buzz