Уязвимость в ОС WatchGuard Fireware может позволить злоумышленнику обойти проверку целостности файловой системы ОС Fireware и поддерживать ограниченную устойчивость с помощью вредоносного пакета обновления прошивки. Эта проблема затрагивает Fireware OS 12.0 до 12.11.7 включительно, 12.5.9 до 12.5.16 включительно и 2025.1 до 2026.1.1 включительно.
Показать оригинальное описание (EN)
A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.
Характеристики атаки
Способ атаки
По сети
Атака возможна удалённо
Сложность
Низкая
Легко эксплуатировать
Условия для атаки
Не требуются
Нет дополнительных условий
Нужны права
Высокие
Нужны права администратора
Участие пользователя
Не требуется
Не нужно действие пользователя
Последствия
Конфиденциальность
Нет
Нет утечки данных
Целостность
Высокое
Полная модификация данных
Доступность
Нет
Нет нарушения работы
Строка CVSS v4.0
Тип уязвимости (CWE)
Уязвимые продукты 39
watchguard:firebox_t45
watchguard:firebox_m370
watchguard:firebox_m470
watchguard:firebox_t185
watchguard:fireboxcloud
watchguard:firebox_m390
watchguard:firebox_m440
watchguard:firebox_t115-w
watchguard:firebox_m695
watchguard:firebox_m495
watchguard:firebox_t145
watchguard:firebox_t25
watchguard:firebox_t125
watchguard:firebox_m570
watchguard:firebox_m595
watchguard:firebox_t70
watchguard:firebox_m395
watchguard:firebox_m590
watchguard:fireware
watchguard:firebox_t80
watchguard:firebox_m270
watchguard:firebox_m4800
watchguard:firebox_t85
watchguard:firebox_t20
watchguard:firebox_m290
watchguard:firebox_t125-w
watchguard:firebox_m670
watchguard:firebox_t55
watchguard:firebox_m295
watchguard:firebox_m4600
watchguard:firebox_m5800
watchguard:fireboxv
watchguard:firebox_nv5
watchguard:firebox_t35
watchguard:firebox_t40
watchguard:firebox_t145-w
watchguard:firebox_m690
watchguard:firebox_t15
watchguard:firebox_m5600
Затронутые конфигурации ПО 41
| Конфигурация | От (включительно) | До (исключительно) |
|---|---|---|
|
Watchguard Fireware
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
|
12.0
|
12.11.8
|
|
Watchguard Firebox_M270
cpe:2.3:h:watchguard:firebox_m270:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M290
cpe:2.3:h:watchguard:firebox_m290:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M370
cpe:2.3:h:watchguard:firebox_m370:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M390
cpe:2.3:h:watchguard:firebox_m390:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M440
cpe:2.3:h:watchguard:firebox_m440:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M4600
cpe:2.3:h:watchguard:firebox_m4600:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M470
cpe:2.3:h:watchguard:firebox_m470:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M4800
cpe:2.3:h:watchguard:firebox_m4800:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M5600
cpe:2.3:h:watchguard:firebox_m5600:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M570
cpe:2.3:h:watchguard:firebox_m570:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M5800
cpe:2.3:h:watchguard:firebox_m5800:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M590
cpe:2.3:h:watchguard:firebox_m590:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M670
cpe:2.3:h:watchguard:firebox_m670:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M690
cpe:2.3:h:watchguard:firebox_m690:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_Nv5
cpe:2.3:h:watchguard:firebox_nv5:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T20
cpe:2.3:h:watchguard:firebox_t20:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T25
cpe:2.3:h:watchguard:firebox_t25:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T40
cpe:2.3:h:watchguard:firebox_t40:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T45
cpe:2.3:h:watchguard:firebox_t45:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T55
cpe:2.3:h:watchguard:firebox_t55:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T70
cpe:2.3:h:watchguard:firebox_t70:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T80
cpe:2.3:h:watchguard:firebox_t80:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T85
cpe:2.3:h:watchguard:firebox_t85:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Fireboxcloud
cpe:2.3:h:watchguard:fireboxcloud:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Fireboxv
cpe:2.3:h:watchguard:fireboxv:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Fireware
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
|
12.5.9
|
12.5.17
|
|
Watchguard Firebox_T15
cpe:2.3:h:watchguard:firebox_t15:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T35
cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Fireware
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
|
2025.1
|
2026.1.2
|
|
Watchguard Firebox_M295
cpe:2.3:h:watchguard:firebox_m295:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M395
cpe:2.3:h:watchguard:firebox_m395:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M495
cpe:2.3:h:watchguard:firebox_m495:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M595
cpe:2.3:h:watchguard:firebox_m595:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_M695
cpe:2.3:h:watchguard:firebox_m695:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T115-W
cpe:2.3:h:watchguard:firebox_t115-w:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T125
cpe:2.3:h:watchguard:firebox_t125:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T125-W
cpe:2.3:h:watchguard:firebox_t125-w:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T145
cpe:2.3:h:watchguard:firebox_t145:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T145-W
cpe:2.3:h:watchguard:firebox_t145-w:-:*:*:*:*:*:*:*
|
— | — |
|
Watchguard Firebox_T185
cpe:2.3:h:watchguard:firebox_t185:-:*:*:*:*:*:*:*
|
— | — |