WatchGuard security update-CVE-2022-26318
NAME
WatchGuard Technologies – Fireware
- Platforms Affected:
Fireware - Risk Level:
medium - CVE Type:
Unspecified
DESCRIPTION
CVE-2022-26318 is an unspecified vulnerability impacting multiple versions of WatchGuard Fireware OS. An exploit was observed in open source. Additionally, security researchers at the Cybersecurity and Infrastructure Security Agency (CISA) claimed the vulnerability was actively exploited in the wild.
CVSS Information:
- CVSS 2.0 SCORE: 7.5
- CVSS 3.0 SCORE: 9.8
- Exploit Disclosed in the Public:
true - Exploit Weaponised:
true - PoC Link:
hXXps://blog[.]assetnote[.]io/2022/04/13/watchguard-firebox-rce/
MITIGATION
WatchGuard Technologies addressed the vulnerability in a security advisory with updated versions.
- Reference Link:
https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.html - Patch Available:
available
If you like the site, please consider joining the telegram channel and supporting us on Patreon using the button below.