UpHeron
All vulnerabilities

Servers and applications

CVE-2022-25361

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.

Severity
Critical 9.1
Published
7 Jun 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.1.3, 12.5.9
Sources
NVD

Affected software

SoftwareAffected versions
WatchGuard Fireware OSServers and applications · cpe:o:watchguard:fireware
  • Version 12.7.2-u1
  • Version 12.7.2
  • Version 12.5.9-u1
  • Version 12.5.9
All 14 release lines
  • From 12.0.0 before 12.1.3
  • Version 12.1.3
  • Version 12.1.3-u1
  • Version 12.1.3-u2
  • Version 12.1.3-u3
  • Version 12.1.3-u4
  • Version 12.1.3-u5
  • Version 12.1.3-u6
  • Version 12.1.3-u7
  • From 12.2.0 before 12.5.9
  • Version 12.5.9
  • Version 12.5.9-u1
  • Version 12.7.2
  • Version 12.7.2-u1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-25361
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-25361