CVE-2022-26318KEV · OVERDUE

WatchGuard Firebox and XTM Appliances Arbitrary Code Execution

Critical · published March 4, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 99.6th percentile for exploit probability.

1652
days past CISA
deadline
CVSS v3.1
9.8
EPSS
78%
Percentile
99.6
In the wild
Confirmed
What it is

🚨 An unauthenticated user can execute arbitrary code on your WatchGuard appliances! That's like handing over your office keys to a random stranger—yikes! 🔥 Think of your WatchGuard Firebox as a secure vault. This vulnerability lets anyone bypass security, like a thief finding a hidden door and accessing your most confidential documents without any checks. If exploited, an attacker could gain full control of your system, potentially leading to data breaches or even complete network takedowns. This isn't just a minor scare; it's a potentially devastating breach of security that could compromise your entire infrastructure!

Put simply

Think of your WatchGuard Firebox as a secure vault. This vulnerability lets anyone bypass security, like a thief finding a hidden door and accessing your most confidential documents without any checks. The vulnerability allows unauthenticated users to execute code on the affected Fireware OS versions, specifically targeting versions before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

What to do

If exploited, an attacker could gain full control of your system, potentially leading to data breaches or even complete network takedowns. This isn't just a minor scare; it's a potentially devastating breach of security that could compromise your entire infrastructure! Immediate action is crucial! Upgrade your Fireware OS to the fixed versions: 12.7.2_U2 or later, 12.1.3_U8 or later, or 12.5.9_U2 to patch this critical flaw. Don't wait—act now to keep your systems secure! You've got this! Stay proactive, and your network will remain strong and fortified! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.78157 · 99.6th percentile
Published
2022-03-04T17:36Z
KEV added
2022-03-25 · due 2022-04-15
EPSS history
Timeline
  • 25 MAR 00:00Z
    Added to CISA KEV — remediate by Apr 15
    kev
  • 04 MAR 17:36Z
    On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786
    cvelistv5