CVE-2022-25361
Vulnerability from cvelistv5
Published
2022-06-07 13:26
Modified
2024-08-03 04:36
Severity ?
Summary
WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
Impacted products
Vendor Product Version
n/a n/a Version: n/a
Show details on NVD website


{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T04:36:06.903Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://watchguard.com"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-06-07T13:26:39",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://watchguard.com"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2022-25361",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://watchguard.com",
              "refsource": "MISC",
              "url": "https://watchguard.com"
            },
            {
              "name": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004",
              "refsource": "MISC",
              "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2022-25361",
    "datePublished": "2022-06-07T13:26:39",
    "dateReserved": "2022-02-18T00:00:00",
    "dateUpdated": "2024-08-03T04:36:06.903Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-25361\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2022-06-07T14:15:09.393\",\"lastModified\":\"2024-11-21T06:52:04.643\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to delete arbitrary files from a limited set of directories on the system. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.\"},{\"lang\":\"es\",\"value\":\"Los dispositivos WatchGuard Firebox y XTM permiten a un atacante remoto no autenticado eliminar archivos arbitrarios de un conjunto limitado de directorios en el sistema. Esta vulnerabilidad afecta a Fireware OS versiones anteriores a 12.7.2_U2, 12.x  versiones anteriores a 12.1.3_U8, y 12.2.x hasta 12.5.x anteriores a 12.5.9_U2\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\",\"baseScore\":9.1,\"baseSeverity\":\"CRITICAL\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":5.2}],\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:N/C:N/I:P/A:P\",\"baseScore\":6.4,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"NONE\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":10.0,\"impactScore\":4.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"NVD-CWE-noinfo\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndExcluding\":\"12.1.3\",\"matchCriteriaId\":\"E7C2E450-C7DC-40F4-928C-2323428E4DF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.2.0\",\"versionEndExcluding\":\"12.5.9\",\"matchCriteriaId\":\"CE9EB306-8BF2-4904-ACA5-5938844CB0A9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"0F3E6444-AA30-4F87-AB97-12601CEDF14E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u1:*:*:*:*:*:*\",\"matchCriteriaId\":\"48106213-C927-4232-A95F-4E6962E72BF9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u2:*:*:*:*:*:*\",\"matchCriteriaId\":\"EB0676CA-E9BF-4CB8-99D2-7FA0ACC711EA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u3:*:*:*:*:*:*\",\"matchCriteriaId\":\"AE1BB0F7-72F1-4601-A1E2-161FCA8819B8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u4:*:*:*:*:*:*\",\"matchCriteriaId\":\"583E164A-E308-4666-84AF-E0ADC16427B4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u5:*:*:*:*:*:*\",\"matchCriteriaId\":\"B310FA82-61C6-4D40-A263-789223301513\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u6:*:*:*:*:*:*\",\"matchCriteriaId\":\"49901BE7-00EA-4180-BC45-CBBFEC295A31\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.1.3:u7:*:*:*:*:*:*\",\"matchCriteriaId\":\"5E842BF2-3C47-4C9B-8BA1-B448A2835E0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.5.9:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"C9586510-0B33-45C9-8550-206791E3C0D6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.5.9:u1:*:*:*:*:*:*\",\"matchCriteriaId\":\"3B345B31-2DC2-49C5-8AC1-A4B12A5B679B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.7.2:-:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA32519C-7B8B-4270-BBAD-7CAFAD28AA5E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:12.7.2:u1:*:*:*:*:*:*\",\"matchCriteriaId\":\"CF8ECE0C-9997-42EB-A983-B930EA4D10E4\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m200:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"947408A7-EC5A-43A0-A2F0-C51055F29BF0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E472917E-D6E1-4C2D-B37D-E76FCC7307CA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9A8C7779-4466-4A9E-B191-929E7746DFF7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m300:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7867C903-6DB6-4E58-AD44-07BBB9C45E72\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"6CE9A123-B769-4E56-845E-DC3DA6166C78\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"180FAE8C-2E73-4C09-AA11-0C82A7715FA3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m400:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7BD5BB5D-12FC-4D49-A2FA-8886077457B8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"309DBEF2-1D92-4641-827F-D99758B5FFA3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BBFBA966-E052-4350-9544-3B5D484DBB6B\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"EF1E586D-0E88-447A-95E8-5203EF869ADB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m500:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08422D7D-CA99-4303-B783-30F8CDCAC34C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"59389EA2-3067-4AF8-AEC5-FE79E269C170\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"445FA7CD-D0AE-4176-9AE5-293B918DE654\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1B4A7366-0304-431E-B3E4-719BA575CEAC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E8512B4A-5269-4067-B9C6-475A4E8AD313\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"179C6166-87E1-44F8-B727-CDDE40C673D9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t10:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D97A123-654D-40B0-A18B-FE4801BF4506\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t10-d:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"983AE311-F2BD-4260-839E-2D906B6E095A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t10-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"28634F62-70D4-49F6-860F-8FE1B85707F6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"626220F8-7F0C-4DD8-8001-12EA0A777A0D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t15-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"083919C1-A383-430A-B56C-13C6128266F8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9295217E-C1A0-4A69-A0F0-C44814BB376C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t20-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"A4832E5E-E4ED-4222-B9A5-060FA6AA22DF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t30:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9E10A9DF-DD32-4E42-838D-E398B3451FBF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t30-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"29D260C9-BB0C-4546-9E56-0283B9332AC5\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E561A57F-91A5-4B3C-9F7D-62E9AB5163A7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35-r:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0B691D60-C12E-49DA-9917-4513E4A57B55\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F374AC3-0292-428B-AA39-F60980874160\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC853916-8BDC-4F7C-BA53-D6AB490A9444\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t40-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4267A4B5-4F48-4104-85E8-3F6B09FD2354\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t50:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"0D15B548-CB7C-44B6-A568-7F87652561D3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t50-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"07EB3F3A-E508-42EF-9D11-9BC77C35EA60\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D3562304-0317-4A3C-B622-D5CE01CC97F9\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t55-w:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"755CD8FA-C341-4C34-8005-A42C32BD85CF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"327BA50A-366A-4367-93B8-328EC0136FA7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"D92ABD52-20F6-4AB1-801F-9E7B7B1B78A1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm1520-rp:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"3E7C021D-0C50-47A8-B8D6-27BE0FBD025C\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm1525-rp:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5EF67525-E49F-4B2C-823B-8447E8450F27\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm2520:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"ED8D9112-1504-4341-B2F9-9967B5D02790\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm850:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"95BC88C9-324F-4803-97E4-91773827F4C3\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm860:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"AADF6164-8A53-4023-B326-C3CA1A4DE0A8\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm870:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"42A6A10F-C0C1-415F-943D-9CFADC35CF73\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_xtm870-f:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4EF5490C-5BBD-476C-916E-26C5426A6069\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"158560A0-D694-41AF-A5F8-0F6FB3EFB8FA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4ECAE1D7-9868-4730-B645-44CB1B6FDE96\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:xtmv:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"72807176-5A59-4BFD-B6C0-2738D9FD3AB5\"}]}]}],\"references\":[{\"url\":\"https://watchguard.com\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004\",\"source\":\"cve@mitre.org\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://watchguard.com\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]},{\"url\":\"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2022-00004\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Vendor Advisory\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.