CVE-2022-23176

Published Feb 24, 2022 CVSS 3.1 · 8.8 High EPSS 10.9% KEV · Listed
Description
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2022-28267 WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.
History
Type Values Removed Values Added
Metrics kev

{'dateAdded': '2022-04-11'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'active', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 21, 2025, 11:15 PM
Reserved
Jan 12, 2022, 12:00 AM
Status
Analyzed
Published
Feb 24, 2022, 3:15 PM
Modified
Jun 17, 2026, 4:29 AM