UpHeron
All vulnerabilities

Servers and applications

CVE-2022-31790

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Severity
High 7.5
Published
6 Sept 2022
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Fixed in
12.1.4, 12.5.10
Sources
NVD

Affected software

SoftwareAffected versions
WatchGuard Fireware OSServers and applications · cpe:o:watchguard:fireware
  • Version 12.8.0-u1
  • Version 12.7.2-u2
  • Version 12.7.1
  • Version 12.7.0-u1
All 10 release lines
  • From 12.0.0 before 12.1.4
  • From 12.2.0 before 12.5.10
  • Version 12.6.1-u1
  • Version 12.6.1-u3
  • Version 12.6.3
  • Version 12.6.4
  • Version 12.7.0-u1
  • Version 12.7.1
  • Version 12.7.2-u2
  • Version 12.8.0-u1

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2022-31790
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2022-31790