UpHeron
All vulnerabilities

Servers and applications

CVE-2022-23176

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 11 Apr 2022.

Severity
High 8.8
Published
24 Feb 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.1.3, 12.5.7
Sources
NVD

Affected software

SoftwareAffected versions
WatchGuard Fireware OSServers and applications · cpe:o:watchguard:fireware
  • Version 12.7.2
  • Version 12.5.7-u2
  • Version 12.5.7-u1
  • Version 12.5.7
All 9 release lines
  • From 12.0.0 before 12.1.3
  • Version 12.1.3
  • Version 12.1.3-u1
  • Version 12.1.3-u2
  • From 12.2.0 before 12.5.7
  • Version 12.5.7
  • Version 12.5.7-u1
  • Version 12.5.7-u2
  • Version 12.7.2

Known exploited

CISA name
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
2 May 2022
Used in ransomware
Not known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-23176
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-23176