Authentication Bypass in WatchGuard Firebox and XTM Appliances

CVE-2022-25363

Summary

An authentication bypass vulnerability in WatchGuard Firebox and XTM appliances allows an authenticated remote attacker with unprivileged access to modify the credentials of privileged management users. This could lead to unauthorized access and control over device management functionalities. Affected versions include Fireware OS versions prior to 12.7.2_U2, as well as specific versions in the 12.x and 12.2.x to 12.5.x ranges.

References