Vulnerability-Lookup

CVE-2025-1545 (GCVE-0-2025-1545)

Vulnerability from cvelistv5 – Published: 2025-12-04 21:48 – Updated: 2026-08-10 16:03

Title

WatchGuard Firebox XPath Injection Vulnerability in Web CGI

Summary

Severity

8.2 (High)


                        
                          CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-12-05 15:43 UTC

CWE

CWE-91

Assigner

WatchGuard

References

2 references

URL	Tags
https://psirt.watchguard.com/CVE-2025-1545	vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wg…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
WatchGuard	Fireware OS	Affected: 2025.1 , < 2025.1.3 (custom) Affected: 12.0 , < 12.11.5 (custom) Affected: 11.11 , ≤ 11.12.4+541730 (custom)
WatchGuard	Fireware OS	Affected: 12.0 , < 12.5.14 (custom)

Date Public

2025-12-04 21:48

Credits

Exodus Intelligence

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-1545",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-12-05T15:43:49.497524Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-12-05T15:44:01.830Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Default"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThan": "2025.1.3",
              "status": "affected",
              "version": "2025.1",
              "versionType": "custom"
            },
            {
              "lessThan": "12.11.5",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            },
            {
              "lessThanOrEqual": "11.12.4+541730",
              "status": "affected",
              "version": "11.11",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "T15/T35"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThan": "12.5.14",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.5.14",
                  "versionStartIncluding": "12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "2025.1.3",
                  "versionStartIncluding": "2025.1",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.11.5",
                  "versionStartIncluding": "12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndIncluding": "11.12.4+541730",
                  "versionStartIncluding": "11.11",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "Exodus Intelligence"
        }
      ],
      "datePublic": "2025-12-04T21:48:27.311Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-91",
              "description": "CWE-91",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-10T16:03:01.062Z",
        "orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "shortName": "WatchGuard"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.watchguard.com/CVE-2025-1545"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Fireware OS 2025.1.3, Fireware OS 12.11.5, Fireware OS 12.5.14"
        }
      ],
      "title": "WatchGuard Firebox XPath Injection Vulnerability in Web CGI"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
    "assignerShortName": "WatchGuard",
    "cveId": "CVE-2025-1545",
    "datePublished": "2025-12-04T21:48:27.311Z",
    "dateReserved": "2025-02-21T09:56:01.214Z",
    "dateUpdated": "2026-08-10T16:03:01.062Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-1545",
      "date": "2026-08-12",
      "epss": "0.00485",
      "percentile": "0.39399"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-1545\",\"sourceIdentifier\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"published\":\"2025-12-04T22:15:48.290\",\"lastModified\":\"2026-08-10T16:19:14.343\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.\"}],\"affected\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"affectedData\":[{\"vendor\":\"WatchGuard\",\"product\":\"Fireware OS\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Default\"],\"versions\":[{\"version\":\"2025.1\",\"lessThan\":\"2025.1.3\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"12.0\",\"lessThan\":\"12.11.5\",\"versionType\":\"custom\",\"status\":\"affected\"},{\"version\":\"11.11\",\"lessThanOrEqual\":\"11.12.4+541730\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"WatchGuard\",\"product\":\"Fireware OS\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"T15/T35\"],\"versions\":[{\"version\":\"12.0\",\"lessThan\":\"12.5.14\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":8.2,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"PRESENT\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"vulnConfidentialityImpact\":\"HIGH\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"NONE\",\"subIntegrityImpact\":\"NONE\",\"subAvailabilityImpact\":\"NONE\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-12-05T15:43:49.497524Z\",\"id\":\"CVE-2025-1545\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-91\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"2025.1\",\"versionEndExcluding\":\"2025.1.3\",\"matchCriteriaId\":\"46DAB795-8DD0-4D6C-99D5-B9057E76DB87\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8AAE66B-DD19-4C90-8DFC-F77BA1541642\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7FC18430-C6B4-4395-BFF1-83BB005875BA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A7C1C91-8B6E-4FB0-841E-7F88B06B1435\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8FE309D6-BD5E-4D18-91C3-A492C3576115\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"75959D39-0960-4836-96C7-DB8048DDE4B8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D0087049-27C6-4B18-A645-72A8F63D7C6D\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.11\",\"versionEndExcluding\":\"12.11.5\",\"matchCriteriaId\":\"8BDAB257-D4A3-4154-860B-89389F624C9B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E472917E-D6E1-4C2D-B37D-E76FCC7307CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A8C7779-4466-4A9E-B191-929E7746DFF7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CE9A123-B769-4E56-845E-DC3DA6166C78\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"180FAE8C-2E73-4C09-AA11-0C82A7715FA3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"309DBEF2-1D92-4641-827F-D99758B5FFA3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D1E8CFC5-51FE-4D75-845F-D70C30AF11B0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBFBA966-E052-4350-9544-3B5D484DBB6B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF1E586D-0E88-447A-95E8-5203EF869ADB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1BC087C4-CB10-46D4-A746-0C462354410C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59389EA2-3067-4AF8-AEC5-FE79E269C170\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"445FA7CD-D0AE-4176-9AE5-293B918DE654\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B4A7366-0304-431E-B3E4-719BA575CEAC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8512B4A-5269-4067-B9C6-475A4E8AD313\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"179C6166-87E1-44F8-B727-CDDE40C673D9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"584107CC-6136-4AA1-AE68-73B93BDDB5B6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9295217E-C1A0-4A69-A0F0-C44814BB376C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7DC49246-2166-4681-8D67-4C0940884872\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC853916-8BDC-4F7C-BA53-D6AB490A9444\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3562304-0317-4A3C-B622-D5CE01CC97F9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"327BA50A-366A-4367-93B8-328EC0136FA7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3552F3BB-8021-4E87-987D-870699A7E619\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"158560A0-D694-41AF-A5F8-0F6FB3EFB8FA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ECAE1D7-9868-4730-B645-44CB1B6FDE96\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"11.11\",\"versionEndExcluding\":\"12.5.14\",\"matchCriteriaId\":\"EEC51913-4550-4D09-A054-28FE1C09801B\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"626220F8-7F0C-4DD8-8001-12EA0A777A0D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E561A57F-91A5-4B3C-9F7D-62E9AB5163A7\"}]}]}],\"references\":[{\"url\":\"https://psirt.watchguard.com/CVE-2025-1545\",\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\"},{\"url\":\"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025\",\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-12-05T22:32:54+00:00",
      "cve": "CVE-2025-1545",
      "id": "CVE-2025-1545",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "WatchGuard Firebox XPath Injection Vulnerability in Web CGI",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-1545.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-1545\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-12-05T15:43:49.497524Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-12-05T15:43:58.971Z\"}}], \"cna\": {\"title\": \"WatchGuard Firebox XPath Injection Vulnerability in Web CGI\", \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"Exodus Intelligence\"}], \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 8.2, \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N\"}}], \"affected\": [{\"vendor\": \"WatchGuard\", \"product\": \"Fireware OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"2025.1\", \"lessThan\": \"2025.1.3\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.11.5\", \"versionType\": \"custom\"}, {\"status\": \"affected\", \"version\": \"11.11\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"11.12.4+541730\"}], \"platforms\": [\"Default\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"WatchGuard\", \"product\": \"Fireware OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.5.14\", \"versionType\": \"custom\"}], \"platforms\": [\"T15/T35\"], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"WatchGuard is not aware of any exploitation of this vulnerability in the wild.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Fireware OS 2025.1.3, Fireware OS 12.11.5, Fireware OS 12.5.14\"}], \"datePublic\": \"2025-12-04T21:48:27.311Z\", \"references\": [{\"url\": \"https://psirt.watchguard.com/CVE-2025-1545\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-91\", \"description\": \"CWE-91\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.5.14\", \"versionStartIncluding\": \"12.0\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"2025.1.3\", \"versionStartIncluding\": \"2025.1\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.11.5\", \"versionStartIncluding\": \"12.0\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndIncluding\": \"11.12.4+541730\", \"versionStartIncluding\": \"11.11\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"shortName\": \"WatchGuard\", \"dateUpdated\": \"2026-08-10T16:03:01.062Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-1545\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-10T16:03:01.062Z\", \"dateReserved\": \"2025-02-21T09:56:01.214Z\", \"assignerOrgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"datePublished\": \"2025-12-04T21:48:27.311Z\", \"assignerShortName\": \"WatchGuard\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

BDU:2025-15457

Vulnerability from fstec - Published: 04.12.2025

Title

Уязвимость веб-интерфейса управления операционной системы WatchGuard Fireware, позволяющая нарушителю получить несанкционированный доступ к защищаемой информации

Description

Уязвимость веб-интерфейса управления операционной системы WatchGuard Fireware связана с ошибками в обработке XML-запросов. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный доступ к защищаемой информации

Severity


                    
                      AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N


                    
                      AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Vendor

Watchguard Technologies Inc.

Software Name

Fireware OS

Software Version

от 2025.1 до 2025.1.2 включительно (Fireware OS), от 12.5 до 12.5.13 включительно (Fireware OS), от 12.0 до 12.11.4 включительно (Fireware OS), от 11.11 до 11.12.4+541730 включительно (Fireware OS)

Possible Mitigations

Использование рекомендаций: https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025

Reference

https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025

CWE

CWE-91

JSON

To clipboard

{
  "CVSS 2.0": "AV:N/AC:L/Au:N/C:C/I:N/A:N",
  "CVSS 3.0": "AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
  "CVSS 4.0": "AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
  "remediation_\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": null,
  "remediation_\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435": null,
  "\u0412\u0435\u043d\u0434\u043e\u0440 \u041f\u041e": "Watchguard Technologies Inc.",
  "\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e": "\u043e\u0442 2025.1 \u0434\u043e 2025.1.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS), \u043e\u0442 12.5 \u0434\u043e 12.5.13 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS), \u043e\u0442 12.0 \u0434\u043e 12.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS), \u043e\u0442 11.11 \u0434\u043e 11.12.4+541730 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e (Fireware OS)",
  "\u0412\u043e\u0437\u043c\u043e\u0436\u043d\u044b\u0435 \u043c\u0435\u0440\u044b \u043f\u043e \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044e": "\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u0439:\nhttps://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025",
  "\u0414\u0430\u0442\u0430 \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f": "04.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0435\u0433\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f": "10.12.2025",
  "\u0414\u0430\u0442\u0430 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438": "10.12.2025",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440": "BDU:2025-15457",
  "\u0418\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0439 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "CVE-2025-1545",
  "\u0418\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f \u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0430",
  "\u041a\u043b\u0430\u0441\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b",
  "\u041d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 \u041f\u041e": "Fireware OS",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u041e\u0421 \u0438 \u0442\u0438\u043f \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0439 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u044b": "Watchguard Technologies Inc. Fireware OS \u043e\u0442 2025.1 \u0434\u043e 2025.1.2 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Watchguard Technologies Inc. Fireware OS \u043e\u0442 12.5 \u0434\u043e 12.5.13 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Watchguard Technologies Inc. Fireware OS \u043e\u0442 12.0 \u0434\u043e 12.11.4 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e , Watchguard Technologies Inc. Fireware OS \u043e\u0442 11.11 \u0434\u043e 11.12.4+541730 \u0432\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e ",
  "\u041d\u0430\u0438\u043c\u0435\u043d\u043e\u0432\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b WatchGuard Fireware, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041d\u0430\u043b\u0438\u0447\u0438\u0435 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u0430": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "\u0412\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 XML (Blind XPath Injection) (CWE-91)",
  "\u041e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b WatchGuard Fireware \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u043e\u0448\u0438\u0431\u043a\u0430\u043c\u0438 \u0432 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 XML-\u0437\u0430\u043f\u0440\u043e\u0441\u043e\u0432. \u042d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u043d\u0430\u0440\u0443\u0448\u0438\u0442\u0435\u043b\u044e, \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0435\u043c\u0443 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e, \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0437\u0430\u0449\u0438\u0449\u0430\u0435\u043c\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438",
  "\u041f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": null,
  "\u041f\u0440\u043e\u0447\u0430\u044f \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u044f": null,
  "\u0421\u0432\u044f\u0437\u044c \u0441 \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430\u043c\u0438 \u0418\u0411": "\u0414\u0430\u043d\u043d\u044b\u0435 \u0443\u0442\u043e\u0447\u043d\u044f\u044e\u0442\u0441\u044f",
  "\u0421\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043d\u0430",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f": "\u041e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u0433\u043e \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u044f",
  "\u0421\u043f\u043e\u0441\u043e\u0431 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438": "\u0418\u043d\u044a\u0435\u043a\u0446\u0438\u044f",
  "\u0421\u0441\u044b\u043b\u043a\u0438 \u043d\u0430 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0438": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025",
  "\u0421\u0442\u0430\u0442\u0443\u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u041f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0430 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u0434\u0438\u0442\u0435\u043b\u0435\u043c",
  "\u0422\u0438\u043f \u041f\u041e": "\u041e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u0430\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u0430",
  "\u0422\u0438\u043f \u043e\u0448\u0438\u0431\u043a\u0438 CWE": "CWE-91",
  "\u0423\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438": "\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 2.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,8)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u0431\u0430\u0437\u043e\u0432\u0430\u044f \u043e\u0446\u0435\u043d\u043a\u0430 CVSS 3.1 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 7,5)\n\u0412\u044b\u0441\u043e\u043a\u0438\u0439 \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (\u043e\u0446\u0435\u043d\u043a\u0430 CVSS 4.0 \u0441\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 8,2)"
}

FKIE_CVE-2025-1545

Vulnerability from fkie_nvd - Published: 2025-12-04 22:15 - Updated: 2026-06-17 08:39

Severity

7.5 (High) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Summary

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.This issue affects Fireware OS 11.11 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.

References

	URL	Tags
	5d1c2695-1a31-4499-88ae-e847036fd7e3	https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025	Vendor Advisory

Impacted products

Vendor	Product	Version
watchguard	fireware	*
watchguard	firebox_t115-w	-
watchguard	firebox_t125	-
watchguard	firebox_t125-w	-
watchguard	firebox_t145	-
watchguard	firebox_t145-w	-
watchguard	firebox_t185	-
watchguard	fireware	*
watchguard	firebox_m270	-
watchguard	firebox_m290	-
watchguard	firebox_m370	-
watchguard	firebox_m390	-
watchguard	firebox_m440	-
watchguard	firebox_m4600	-
watchguard	firebox_m470	-
watchguard	firebox_m4800	-
watchguard	firebox_m5600	-
watchguard	firebox_m570	-
watchguard	firebox_m5800	-
watchguard	firebox_m590	-
watchguard	firebox_m670	-
watchguard	firebox_m690	-
watchguard	firebox_nv5	-
watchguard	firebox_t20	-
watchguard	firebox_t25	-
watchguard	firebox_t40	-
watchguard	firebox_t45	-
watchguard	firebox_t55	-
watchguard	firebox_t70	-
watchguard	firebox_t80	-
watchguard	firebox_t85	-
watchguard	fireboxcloud	-
watchguard	fireboxv	-
watchguard	fireware	*
watchguard	firebox_t15	-
watchguard	firebox_t35	-

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThanOrEqual": "11.12.4+541730",
              "status": "affected",
              "version": "11.11",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.11.4",
              "status": "affected",
              "version": "12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.5.13",
              "status": "affected",
              "version": "12.5",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "2025.1.2",
              "status": "affected",
              "version": "2025.1",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "46DAB795-8DD0-4D6C-99D5-B9057E76DB87",
              "versionEndExcluding": "2025.1.3",
              "versionStartIncluding": "2025.1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8AAE66B-DD19-4C90-8DFC-F77BA1541642",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7FC18430-C6B4-4395-BFF1-83BB005875BA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A7C1C91-8B6E-4FB0-841E-7F88B06B1435",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FE309D6-BD5E-4D18-91C3-A492C3576115",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "75959D39-0960-4836-96C7-DB8048DDE4B8",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D0087049-27C6-4B18-A645-72A8F63D7C6D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8BDAB257-D4A3-4154-860B-89389F624C9B",
              "versionEndExcluding": "12.11.5",
              "versionStartIncluding": "11.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E472917E-D6E1-4C2D-B37D-E76FCC7307CA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9A8C7779-4466-4A9E-B191-929E7746DFF7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6CE9A123-B769-4E56-845E-DC3DA6166C78",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "180FAE8C-2E73-4C09-AA11-0C82A7715FA3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "309DBEF2-1D92-4641-827F-D99758B5FFA3",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D1E8CFC5-51FE-4D75-845F-D70C30AF11B0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBFBA966-E052-4350-9544-3B5D484DBB6B",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EF1E586D-0E88-447A-95E8-5203EF869ADB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1BC087C4-CB10-46D4-A746-0C462354410C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "59389EA2-3067-4AF8-AEC5-FE79E269C170",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "445FA7CD-D0AE-4176-9AE5-293B918DE654",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B4A7366-0304-431E-B3E4-719BA575CEAC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E8512B4A-5269-4067-B9C6-475A4E8AD313",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "179C6166-87E1-44F8-B727-CDDE40C673D9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "584107CC-6136-4AA1-AE68-73B93BDDB5B6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "9295217E-C1A0-4A69-A0F0-C44814BB376C",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7DC49246-2166-4681-8D67-4C0940884872",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC853916-8BDC-4F7C-BA53-D6AB490A9444",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "DCB1A254-DA3C-4032-B2C6-C9EBCE8EC15E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D3562304-0317-4A3C-B622-D5CE01CC97F9",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "327BA50A-366A-4367-93B8-328EC0136FA7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3552F3BB-8021-4E87-987D-870699A7E619",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "158560A0-D694-41AF-A5F8-0F6FB3EFB8FA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4ECAE1D7-9868-4730-B645-44CB1B6FDE96",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "EEC51913-4550-4D09-A054-28FE1C09801B",
              "versionEndExcluding": "12.5.14",
              "versionStartIncluding": "11.11",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "626220F8-7F0C-4DD8-8001-12EA0A777A0D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E561A57F-91A5-4B3C-9F7D-62E9AB5163A7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.This issue affects Fireware OS 11.11 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2."
    }
  ],
  "id": "CVE-2025-1545",
  "lastModified": "2026-06-17T08:39:20.623",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "NONE",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "PRESENT",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 8.2,
          "baseSeverity": "HIGH",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "NONE",
          "subConfidentialityImpact": "NONE",
          "subIntegrityImpact": "NONE",
          "userInteraction": "NONE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "HIGH",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-1545",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-12-05T15:43:49.497524Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-12-04T22:15:48.290",
  "references": [
    {
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025"
    }
  ],
  "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-91"
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "type": "Secondary"
    }
  ]
}

GHSA-PQQ2-XHG5-JR2V

Vulnerability from github – Published: 2025-12-05 00:31 – Updated: 2026-08-10 18:31

Details

Severity

7.5 (High)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

8.2 (High)


                  
                    CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-1545"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-91"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-12-04T22:15:48Z",
    "severity": "HIGH"
  },
  "details": "An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.This issue affects Fireware OS 11.11 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.",
  "id": "GHSA-pqq2-xhg5-jr2v",
  "modified": "2026-08-10T18:31:59Z",
  "published": "2025-12-05T00:31:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-1545"
    },
    {
      "type": "WEB",
      "url": "https://psirt.watchguard.com/CVE-2025-1545"
    },
    {
      "type": "WEB",
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

WID-SEC-W-2025-2749

Vulnerability from csaf_certbund - Published: 2025-12-04 23:00 - Updated: 2025-12-04 23:00

Summary

WatchGuard Firebox: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Angriff: Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuführen, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuführen.

Betroffene Betriebssysteme: - Sonstiges

CVE-2025-11838

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-12026

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-12195

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-12196

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-13936

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-13937

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-13938

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-13939

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-13940

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

CVE-2025-1545

Affected products

Known affected 3 products

Product	Identifier	Version	Remediation
WatchGuard Firebox <12.5.14 WatchGuard / Firebox		<12.5.14
WatchGuard Firebox <12.11.5 WatchGuard / Firebox		<12.11.5
WatchGuard Firebox <2025.1.3 WatchGuard / Firebox		<2025.1.3

References

12 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um einen Denial of Service Angriff durchzuf\u00fchren, um Informationen offenzulegen, um einen Cross-Site Scripting Angriff durchzuf\u00fchren, um Sicherheitsvorkehrungen zu umgehen, und um beliebigen Programmcode auszuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- Sonstiges",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-2749 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-2749.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-2749 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-2749"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00017 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00017"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00018 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00018"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00019 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00019"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00020 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00020"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00021 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00021"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00022 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00022"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00023 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00023"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00024 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00024"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00025 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00025"
      },
      {
        "category": "external",
        "summary": "WatchGuard Security Advisory wgsa-2025-00026 vom 2025-12-04",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00026"
      }
    ],
    "source_lang": "en-US",
    "title": "WatchGuard Firebox: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-12-04T23:00:00.000+00:00",
      "generator": {
        "date": "2025-12-05T11:02:10.606+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.5.0"
        }
      },
      "id": "WID-SEC-W-2025-2749",
      "initial_release_date": "2025-12-04T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-12-04T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "\u003c2025.1.3",
                "product": {
                  "name": "WatchGuard Firebox \u003c2025.1.3",
                  "product_id": "T049130"
                }
              },
              {
                "category": "product_version",
                "name": "2025.1.3",
                "product": {
                  "name": "WatchGuard Firebox 2025.1.3",
                  "product_id": "T049130-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:watchguard:firebox:2025.1.3"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.11.5",
                "product": {
                  "name": "WatchGuard Firebox \u003c12.11.5",
                  "product_id": "T049131"
                }
              },
              {
                "category": "product_version",
                "name": "12.11.5",
                "product": {
                  "name": "WatchGuard Firebox 12.11.5",
                  "product_id": "T049131-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:watchguard:firebox:12.11.5"
                  }
                }
              },
              {
                "category": "product_version_range",
                "name": "\u003c12.5.14",
                "product": {
                  "name": "WatchGuard Firebox \u003c12.5.14",
                  "product_id": "T049132"
                }
              },
              {
                "category": "product_version",
                "name": "12.5.14",
                "product": {
                  "name": "WatchGuard Firebox 12.5.14",
                  "product_id": "T049132-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:watchguard:firebox:12.5.14"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Firebox"
          }
        ],
        "category": "vendor",
        "name": "WatchGuard"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-11838",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-11838"
    },
    {
      "cve": "CVE-2025-12026",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-12026"
    },
    {
      "cve": "CVE-2025-12195",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-12195"
    },
    {
      "cve": "CVE-2025-12196",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-12196"
    },
    {
      "cve": "CVE-2025-13936",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-13936"
    },
    {
      "cve": "CVE-2025-13937",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-13937"
    },
    {
      "cve": "CVE-2025-13938",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-13938"
    },
    {
      "cve": "CVE-2025-13939",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-13939"
    },
    {
      "cve": "CVE-2025-13940",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-13940"
    },
    {
      "cve": "CVE-2025-1545",
      "product_status": {
        "known_affected": [
          "T049132",
          "T049131",
          "T049130"
        ]
      },
      "release_date": "2025-12-04T23:00:00.000+00:00",
      "title": "CVE-2025-1545"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2025-1545 (GCVE-0-2025-1545)

BDU:2025-15457

FKIE_CVE-2025-1545

GHSA-PQQ2-XHG5-JR2V

WID-SEC-W-2025-2749

Tags

Sightings

Nomenclature