WID-SEC-W-2025-1528

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

WatchGuard Firebox: Mehrere Schwachstellen

view advisory published 2025-07-10

Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um einen Cross-Site Scripting Angriff durchzuführen, und um beliebigen Programmcode auszuführen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-6946USmedium4.8—
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the IPS configuration. An authenticated remote attacker wi…
CVE-2025-1547UShigh7.2—
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code…
CVE-2025-4106US—OT elevated—
An authenticated admin user with access to both the management WebUI and command line interface on a Firebox can enable a diagnostic debug shell by uploading a platform and version…
CVE-2025-6999US——
An HTTP Request Smuggling [CWE-444] vulnerability in the Authentication portal of WatchGuard Fireware OS allows a remote attacker to evade request parameter sanitation and perform…
CVE-2025-6947US——
A stored cross-site scripting (XSS) vulnerability exists in the management interface of WatchGuard Firebox appliances via the SIP Proxy configuration. An authenticated remote attac…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan