CVE-2022-31790

Published: Sep 6, 2022Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Affected (10)

Products: Watchguard: Fireware

Watchguard

1 product

Fireware

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Watchguard Fireware	12.0.0 ≤ version < 12.1.4
Watchguard Fireware	12.2.0 ≤ version < 12.5.10
Watchguard Fireware	Version 12.6.1 u1
Watchguard Fireware	Version 12.6.1 u3
Watchguard Fireware	Version 12.6.3
Watchguard Fireware	Version 12.6.4
Watchguard Fireware	Version 12.7.0 u1
Watchguard Fireware	Version 12.7.1
Watchguard Fireware	Version 12.7.2 u2
Watchguard Fireware	Version 12.8.0 u1