Watchguard vulnerabilities2 known to be exploited.
Watchguard has 71 published vulnerabilities across 101 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Fireware, with 22. If you run Watchguard software, patch the exploited flaws first.
The most recent Watchguard flaw added to the known-exploited list is CVE-2022-23176, on 11 April 2022. We keep watching the known-exploited list.
Which Watchguard products have the most vulnerabilities?
Fireware leads with 22 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Watchguard vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8WatchGuard Firebox and XTM Privilege Escalation Vulnerability
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
- 9.8WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code.
Which Watchguard flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 78%
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.
- 59%CVE-2015-5453Medium
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in the id parameter to ADMIN/mailqueue.spl.
- 12%CVE-2013-6021Critical
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.
- 11%
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
- 8.4%CVE-2018-10575Critical
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15.
- 6.4%CVE-2018-10577High
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before 2.0.0.10.
- 6.2%CVE-2000-0895Critical
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long GET request.
- 5.2%CVE-2011-2165Medium
The STARTTLS implementation in WatchGuard XCS 9.0 and 9.1 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted SMTP sessions by sending a cleartext...
- 5.1%CVE-2017-8056Medium
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent.
- 4.3%CVE-2002-1519Critical
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attackers to cause a denial of service and possibly execute arbitrary code via...
All Watchguard products we track.
24 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Firewarefireware22 vulnerabilities83 versions
- Soho Firewallsoho_firewall8 vulnerabilities7 versions
- Ap100 Firmwareap100_firmware4 vulnerabilities1 version
- Ap102 Firmwareap102_firmware4 vulnerabilities1 version
- Ap200 Firmwareap200_firmware4 vulnerabilities1 version
- Fireboxfirebox4 vulnerabilities6 versions
- Firebox Iifirebox_ii4 vulnerabilities6 versions
- Xcsxcs3 vulnerabilities4 versions
- Ap300 Firmwareap300_firmware2 vulnerabilities1 version
- Panda Antiviruspanda_antivirus2 vulnerabilities1 version
- Serverlockserverlock2 vulnerabilities4 versions
- AD Helper Firmwaread_helper_firmware1 vulnerability1 version
- Firebox 2500firebox_25001 vulnerability2 versions
- Firebox 4500firebox_45001 vulnerability2 versions
- Firebox Pptp VPNfirebox_pptp_vpn1 vulnerability2 versions
- Fireware Xtmfireware_xtm1 vulnerability1 version
- Hawkeye Ghawkeye_g1 vulnerability1 version
- Panda Domepanda_dome1 vulnerability1 version
- Panda Endpoint Administration Agentpanda_endpoint_administration_agent1 vulnerability1 version
- Panda Mobile Securitypanda_mobile_security1 vulnerability1 version
- Panda Security VPNpanda_security_vpn1 vulnerability1 version
- Panda Url Filteringpanda_url_filtering1 vulnerability1 version
- Server Centerserver_center1 vulnerability2 versions
- Xmt515 Firmwarexmt515_firmware1 vulnerability1 version
This directory lists the 24 Watchguard products with at least one tracked version, of 101 in our catalogue.
Running Watchguard? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
- Matched to
- Fireware on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 71 published vulnerabilities across 101 products and 132 versions from Watchguard. The most recent Watchguard flaw added to the known-exploited list is CVE-2022-23176, on 11 April 2022.
2 Watchguard vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2022-23176 and CVE-2022-26318. The full list is on this page.
Fireware, with 22 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Watchguard products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.