Skip to content
Noroxi

WatchGuard records

133 published records for vendor watchguard.

Researcher profile

Entered KEV
4 · 3%
Weaponized
5 · 3.8%
Pre-auth RCE
12
With a fix record
8.3%
Median publish → KEV
34 days

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

133 records
  • CVE-2025-9242
    95Now

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    CriticalCVSS 9.3KEVWeaponizedEPSS 92%

    watchguard · firewareSep 17, 2025

  • CVE-2022-26318
    92Now

    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.

    CriticalCVSS 9.8KEVWeaponizedEPSS 78%

    watchguard · firewareMar 4, 2022

  • CVE-2025-14733
    76This week

    WatchGuard Firebox iked Out of Bounds Write Vulnerability

    CriticalCVSS 9.3KEVWeaponizedEPSS 29%

    watchguard · firewareDec 18, 2025

  • CVE-2022-23176
    68This week

    WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged managemen

    HighCVSS 8.8KEVWeaponizedEPSS 10%

    watchguard · firewareFeb 24, 2022

  • CVE-2015-5453
    44Plan

    Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in t

    MediumCVSS 6.5WeaponizedEPSS 58%

    watchguard · xcsJul 8, 2015

  • CVE-2018-10575
    42Plan

    An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15.

    CriticalCVSS 9.8Proof of conceptEPSS 8%

    watchguard · ap200 firmwareApr 30, 2018

  • CVE-2000-0895
    42Plan

    Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb

    CriticalCVSS 10.0No exploitEPSS 6%

    watchguard · soho firewallFeb 12, 2001

  • CVE-2013-6021
    41Plan

    Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid

    CriticalCVSS 9.3Proof of conceptEPSS 11%

    watchguard · firewareOct 19, 2013

  • CVE-2002-1519
    41Plan

    Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote atta

    CriticalCVSS 10.0No exploitEPSS 4%

    watchguard · fireboxApr 2, 2003

  • CVE-2002-0528
    41Plan

    Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrato

    CriticalCVSS 10.0No exploitEPSS 3%

    watchguard · soho firewallAug 12, 2002

  • CVE-2002-1520
    41Plan

    The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a

    CriticalCVSS 10.0No exploitEPSS 2%

    watchguard · fireboxApr 2, 2003

  • CVE-2001-0203
    41Plan

    Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a f

    CriticalCVSS 10.0No exploitEPSS 2%

    watchguard · firebox iiMar 26, 2001

  • CVE-2000-0894
    41Plan

    HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti

    CriticalCVSS 10.0No exploitEPSS 1%

    watchguard · soho firewallFeb 12, 2001

  • CVE-2022-31789
    40Plan

    An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and pote

    CriticalCVSS 9.8No exploitEPSS 1%

    watchguard · firewareSep 6, 2022

  • CVE-2018-10578
    39Monitor

    An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before

    CriticalCVSS 9.8No exploitEPSS 1%

    watchguard · ap200 firmwareMay 2, 2018

  • CVE-2018-10577
    37Monitor

    An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before

    HighCVSS 8.8Proof of conceptEPSS 6%

    watchguard · ap200 firmwareMay 2, 2018

  • CVE-2024-6592
    37Monitor

    WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass

    CriticalCVSS 9.3Proof of conceptEPSS 1%

    watchguard · authentication gatewaySep 25, 2024

  • CVE-2024-6593
    37Monitor

    WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass

    CriticalCVSS 9.3No exploitEPSS 0%

    watchguard · authentication gatewaySep 25, 2024

  • CVE-2026-13043
    37Monitor

    WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access

    CriticalCVSS 9.3Proof of conceptEPSS 0%

    watchguard · endpoint securityOct 1, 2026

  • CVE-2026-3342
    36Monitor

    WatchGuard Firebox Out of Bounds Write Vulnerability

    HighCVSS 8.6No exploitEPSS 6%

    watchguard · firewareMar 3, 2026

  • CVE-2015-2878
    36Monitor

    Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication

    HighCVSS 8.8Proof of conceptEPSS 4%

    watchguard · hawkeye gOct 23, 2017

  • CVE-2022-25292
    36Monitor

    A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execut

    HighCVSS 8.8No exploitEPSS 2%

    watchguard · firewareFeb 24, 2022

  • CVE-2022-25293
    36Monitor

    A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execut

    HighCVSS 8.8No exploitEPSS 2%

    watchguard · firewareFeb 24, 2022

  • CVE-2022-25291
    36Monitor

    An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow

    HighCVSS 8.8No exploitEPSS 1%

    watchguard · firewareFeb 24, 2022

  • CVE-2022-25361
    36Monitor

    WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories o

    CriticalCVSS 9.1No exploitEPSS 1%

    watchguard · firewareJun 7, 2022