9.8Kritik
KEV
CVE-2022-26318WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
Aktif olarak istismar ediliyor — WatchGuard Firebox and XTM Appliances Arbitrary Code Execution
CISA bu açığın gerçek saldırılarda kullanıldığını 25.03.2022 tarihinde doğruladı. ABD federal kurumları için düzeltme son tarihi: 15.04.2022.
Gerekli işlem: Apply updates per vendor instructions. https://nvd.nist.gov/vuln/detail/CVE-2022-26318
Açıklama
On WatchGuard Firebox and XTM appliances, an unauthenticated user can execute arbitrary code, aka FBX-22786. This vulnerability impacts Fireware OS before 12.7.2_U2, 12.x before 12.1.3_U8, and 12.2.x through 12.5.x before 12.5.9_U2.
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| watchguard | fireware | 12.0.0 – < 12.1.3 |
Kaynaklar ve yamalar
- https://www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html… Release NotesVendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-26318 US Government Resource
CPE eşleşmeleri (NVD) (13)
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.0.0 < 12.1.3cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.5 < 12.5.9cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*≥ 12.7.0 < 12.7.2cpe:2.3:o:watchguard:fireware:12.1.3:*:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u1:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u2:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u3:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u4:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u5:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u6:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.1.3:u7:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.5.9:u1:*:*:*:*:*:*cpe:2.3:o:watchguard:fireware:12.7.2:u1:*:*:*:*:*:*