Записи WatchGuard
133 опубликованных записей вендора watchguard.
Профиль для исследователя
- Попали в KEV
- 4 · 3 %
- С эксплойтом
- 5 · 3,8 %
- Pre-auth RCE
- 12
- С записью об исправлении
- 8,3 %
- Медиана: публикация → KEV
- 34 дн.
Повторяющиеся классы
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')19
- CWE-787 Out-of-bounds Write13
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')5
- CWE-121 Stack-based Buffer Overflow4
- CWE-476 NULL Pointer Dereference3
- CWE-20 Improper Input Validation3
Классы уязвимостей, которые чаще всего встречаются у этого вендора: куда смотреть.
CWEВсе записи
133 записей| Срочность | CVE | Уязвимость | Критичность | KEV | EPSS | Опубликовано |
|---|---|---|---|---|---|---|
95Срочно | CVE-2025-9242Готовый эксплойт | WatchGuard Firebox iked Out of Bounds Write Vulnerabilitywatchguard · fireware · CWE-787 | Критическая9,3 | KEV | 91,8 % | 17 сент. 2025 г. |
92Срочно | CVE-2022-26318Готовый эксплойт | On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.watchguard · fireware | Критическая9,8 | KEV | 78,1 % | 4 мар. 2022 г. |
75На этой неделе | CVE-2025-14733Готовый эксплойт | WatchGuard Firebox iked Out of Bounds Write Vulnerabilitywatchguard · fireware · CWE-787 | Критическая9,3 | KEV | 26,5 % | 18 дек. 2025 г. |
68На этой неделе | CVE-2022-23176Готовый эксплойт | WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged managemenwatchguard · fireware | Высокая8,8 | KEV | 10,8 % | 24 февр. 2022 г. |
44В плане | CVE-2015-5453Готовый эксплойт | Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in twatchguard · xcs · CWE-77 | Средняя6,5 | — | 58,4 % | 8 июл. 2015 г. |
42В плане | CVE-2018-10575Proof of concept | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15.watchguard · ap200 firmware · CWE-798 | Критическая9,8 | — | 8,3 % | 30 апр. 2018 г. |
42В плане | CVE-2000-0895Эксплойта нет | Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arbwatchguard · soho firewall | Критическая10,0 | — | 6,2 % | 12 февр. 2001 г. |
41В плане | CVE-2013-6021Proof of concept | Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionidwatchguard · fireware · CWE-119 | Критическая9,3 | — | 11,7 % | 19 окт. 2013 г. |
41В плане | CVE-2002-1519Эксплойта нет | Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote attawatchguard · firebox | Критическая10,0 | — | 4,2 % | 2 апр. 2003 г. |
41В плане | CVE-2002-0528Эксплойта нет | Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administratowatchguard · soho firewall | Критическая10,0 | — | 3,1 % | 12 авг. 2002 г. |
41В плане | CVE-2002-1520Эксплойта нет | The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when awatchguard · firebox | Критическая10,0 | — | 2,7 % | 2 апр. 2003 г. |
41В плане | CVE-2001-0203Эксплойта нет | Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a fwatchguard · firebox ii | Критическая10,0 | — | 2,3 % | 26 мар. 2001 г. |
41В плане | CVE-2000-0894Эксплойта нет | HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebootiwatchguard · soho firewall | Критическая10,0 | — | 1,9 % | 12 февр. 2001 г. |
40В плане | CVE-2022-31789Эксплойта нет | An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and potewatchguard · fireware · CWE-190 | Критическая9,8 | — | 1,8 % | 6 сент. 2022 г. |
39Наблюдать | CVE-2018-10578Эксплойта нет | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before watchguard · ap200 firmware · CWE-20 | Критическая9,8 | — | 1,2 % | 2 мая 2018 г. |
37Наблюдать | CVE-2018-10577Proof of concept | An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before watchguard · ap200 firmware · CWE-434 | Высокая8,8 | — | 6,3 % | 2 мая 2018 г. |
37Наблюдать | CVE-2024-6592Proof of concept | WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypasswatchguard · authentication gateway · CWE-306 | Критическая9,3 | — | 1,1 % | 25 сент. 2024 г. |
37Наблюдать | CVE-2024-6593Эксплойта нет | WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypasswatchguard · authentication gateway · CWE-863 | Критическая9,3 | — | 0,5 % | 25 сент. 2024 г. |
37Наблюдать | CVE-2026-13043Proof of concept | WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Accesswatchguard · endpoint security · CWE-306 | Критическая9,3 | — | 0,1 % | 1 окт. 2026 г. |
36Наблюдать | CVE-2015-2878Proof of concept | Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authenticationwatchguard · hawkeye g · CWE-352 | Высокая8,8 | — | 4,1 % | 23 окт. 2017 г. |
36Наблюдать | CVE-2022-25292Эксплойта нет | A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially executwatchguard · fireware · CWE-787 | Высокая8,8 | — | 2,1 % | 24 февр. 2022 г. |
36Наблюдать | CVE-2022-25293Эксплойта нет | A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially executwatchguard · fireware · CWE-787 | Высокая8,8 | — | 2,1 % | 24 февр. 2022 г. |
36Наблюдать | CVE-2022-25291Эксплойта нет | An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflowwatchguard · fireware · CWE-190 | Высокая8,8 | — | 1,8 % | 24 февр. 2022 г. |
36Наблюдать | CVE-2022-25361Эксплойта нет | WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories owatchguard · fireware | Критическая9,1 | — | 1,3 % | 7 июн. 2022 г. |
36Наблюдать | CVE-2026-13368Эксплойта нет | WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authenticationwatchguard · fireware · CWE-416 | Критическая9,2 | — | 0,9 % | 2 июл. 2026 г. |
- CVE-2025-924295Срочно
WatchGuard Firebox iked Out of Bounds Write Vulnerability
КритическаяCVSS 9,3KEVГотовый эксплойтEPSS 91 %watchguard · fireware17 сент. 2025 г.
- CVE-2022-2631892Срочно
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786.
КритическаяCVSS 9,8KEVГотовый эксплойтEPSS 78 %watchguard · fireware4 мар. 2022 г.
- CVE-2025-1473375На этой неделе
WatchGuard Firebox iked Out of Bounds Write Vulnerability
КритическаяCVSS 9,3KEVГотовый эксплойтEPSS 26 %watchguard · fireware18 дек. 2025 г.
- CVE-2022-2317668На этой неделе
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged managemen
ВысокаяCVSS 8,8KEVГотовый эксплойтEPSS 10 %watchguard · fireware24 февр. 2022 г.
- CVE-2015-545344В плане
Watchguard XCS 9.2 and 10.0 before build 150522 allow remote authenticated users to execute arbitrary commands via shell metacharacters in t
СредняяCVSS 6,5Готовый эксплойтEPSS 58 %watchguard · xcs8 июл. 2015 г.
- CVE-2018-1057542В плане
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15.
КритическаяCVSS 9,8Proof of conceptEPSS 8 %watchguard · ap200 firmware30 апр. 2018 г.
- CVE-2000-089542В плане
Buffer overflow in HTTP server on the WatchGuard SOHO firewall allows remote attackers to cause a denial of service and possibly execute arb
КритическаяCVSS 10,0Эксплойта нетEPSS 6 %watchguard · soho firewall12 февр. 2001 г.
- CVE-2013-602141В плане
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid
КритическаяCVSS 9,3Proof of conceptEPSS 11 %watchguard · fireware19 окт. 2013 г.
- CVE-2002-151941В плане
Format string vulnerability in the CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, allows remote atta
КритическаяCVSS 10,0Эксплойта нетEPSS 4 %watchguard · firebox2 апр. 2003 г.
- CVE-2002-052841В плане
Watchguard SOHO firewall 5.0.35 unpredictably disables certain IP restrictions for customized services that were set before the administrato
КритическаяCVSS 10,0Эксплойта нетEPSS 3 %watchguard · soho firewall12 авг. 2002 г.
- CVE-2002-152041В плане
The CLI interface for WatchGuard Firebox Vclass 3.2 and earlier, and RSSA Appliance 3.0.2, does not properly close the SSH connection when a
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %watchguard · firebox2 апр. 2003 г.
- CVE-2001-020341В плане
Watchguard Firebox II firewall allows users with read-only access to gain read-write access, and administrative privileges, by accessing a f
КритическаяCVSS 10,0Эксплойта нетEPSS 2 %watchguard · firebox ii26 мар. 2001 г.
- CVE-2000-089441В плане
HTTP server on the WatchGuard SOHO firewall does not properly restrict access to administrative functions such as password resets or rebooti
КритическаяCVSS 10,0Эксплойта нетEPSS 1 %watchguard · soho firewall12 февр. 2001 г.
- CVE-2022-3178940В плане
An integer overflow in WatchGuard Firebox and XTM appliances allows an unauthenticated remote attacker to trigger a buffer overflow and pote
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %watchguard · fireware6 сент. 2022 г.
- CVE-2018-1057839Наблюдать
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before
КритическаяCVSS 9,8Эксплойта нетEPSS 1 %watchguard · ap200 firmware2 мая 2018 г.
- CVE-2018-1057737Наблюдать
An issue was discovered on WatchGuard AP100, AP102, and AP200 devices with firmware before 1.2.9.15, and AP300 devices with firmware before
ВысокаяCVSS 8,8Proof of conceptEPSS 6 %watchguard · ap200 firmware2 мая 2018 г.
- CVE-2024-659237Наблюдать
WatchGuard Firebox Single Sign-On Agent Protocol Authorization Bypass
КритическаяCVSS 9,3Proof of conceptEPSS 1 %watchguard · authentication gateway25 сент. 2024 г.
- CVE-2024-659337Наблюдать
WatchGuard Firebox Single Sign-On Agent Management Interface Authentication Bypass
КритическаяCVSS 9,3Эксплойта нетEPSS 0 %watchguard · authentication gateway25 сент. 2024 г.
- CVE-2026-1304337Наблюдать
WatchGuard Endpoint Security Missing Authentication in Kernel Memory Access Driver Allows Arbitrary Kernel Memory Access
КритическаяCVSS 9,3Proof of conceptEPSS 0 %watchguard · endpoint security1 окт. 2026 г.
- CVE-2015-287836Наблюдать
Multiple cross-site request forgery (CSRF) vulnerabilities in Hexis HawkEye G 3.0.1.4912 allow remote attackers to hijack the authentication
ВысокаяCVSS 8,8Proof of conceptEPSS 4 %watchguard · hawkeye g23 окт. 2017 г.
- CVE-2022-2529236Наблюдать
A wgagent stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execut
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %watchguard · fireware24 февр. 2022 г.
- CVE-2022-2529336Наблюдать
A systemd stack-based buffer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to potentially execut
ВысокаяCVSS 8,8Эксплойта нетEPSS 2 %watchguard · fireware24 февр. 2022 г.
- CVE-2022-2529136Наблюдать
An integer overflow in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker to trigger a heap-based buffer overflow
ВысокаяCVSS 8,8Эксплойта нетEPSS 1 %watchguard · fireware24 февр. 2022 г.
- CVE-2022-2536136Наблюдать
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories o
КритическаяCVSS 9,1Эксплойта нетEPSS 1 %watchguard · fireware7 июн. 2022 г.
- CVE-2026-1336836Наблюдать
WatchGuard Firebox Race Condition and Use-After-Free in Mobile VPN with IKEv2 LDAP Authentication
КритическаяCVSS 9,2Эксплойта нетEPSS 0 %watchguard · fireware2 июл. 2026 г.