Описание
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.
Ссылки
- Vendor Advisory
- Vendor Advisory
- Exploit
- PatchUS Government Resource
- Exploit
- Exploit
- Vendor Advisory
- Vendor Advisory
- Exploit
- PatchUS Government Resource
- Exploit
- Exploit
Уязвимые конфигурации
Конфигурация 1Версия до 11.7.4 (включая)
Одно из
cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.0.2:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.1:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.2.3:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.3:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.3.6:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.4:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.4.2:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.5.1:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.5.3:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.6.6:*:*:*:*:*:*:*
cpe:2.3:o:watchguard:fireware:11.7.2:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.54035
Средний
9.3 Critical
CVSS2
Дефекты
CWE-119
Связанные уязвимости
github
больше 3 лет назад
Buffer overflow in WGagent in WatchGuard WSM and Fireware before 11.8 allows remote attackers to execute arbitrary code via a long sessionid value in a cookie.
EPSS
Процентиль: 98%
0.54035
Средний
9.3 Critical
CVSS2
Дефекты
CWE-119