Improper Input Validation in WatchGuard Fireware OS Exposure

CVE-2025-0178

What is CVE-2025-0178?

A vulnerability in WatchGuard Fireware OS relates to improper input validation that can potentially be exploited by attackers. By manipulating the value of the HTTP Host header in requests sent to the Web UI, adversaries could redirect users to malicious sites, poison the web cache, or inject harmful JavaScript into the responses. This compromise impacts all versions of Fireware OS from 12.0 to 12.11, highlighting the need for immediate attention to ensure user security and system integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References