Watchguard Firebox/XTM up to 12.1.3/12.5.9/12.8.0 Management Web Interface cross site scripting

Summaryinfo

A vulnerability was found in Watchguard Firebox and XTM up to 12.1.3/12.5.9/12.8.0. It has been rated as problematic. This impacts an unknown function of the component Management Web Interface. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2022-31792. It is possible to initiate the attack remotely. There is no exploit available. Upgrading the affected component is advised.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Watchguard Firebox and XTM up to 12.1.3/12.5.9/12.8.0. This issue affects an unknown function of the component Management Web Interface. The manipulation with an unknown input leads to a cross site scripting vulnerability. Using CWE to declare the problem leads to CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. Impacted is integrity. The summary by CVE is:

A stored cross-site scripting (XSS) vulnerability exists in the management web interface of WatchGuard Firebox and XTM appliances. A remote attacker can potentially execute arbitrary JavaScript code in the management web interface by sending crafted requests to exposed management ports. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

The weakness was shared 09/07/2022 as wgsa-2022-0001. It is possible to read the advisory at watchguard.com. The identification of this vulnerability is CVE-2022-31792 since 05/27/2022. It demands that the victim is doing some kind of user interaction. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1059.007 according to MITRE ATT&CK.

Upgrading to version 12.1.4, 12.5.10 or 12.8.1 eliminates this vulnerability.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• Watchguard

Name

• Firebox
• XTM

Version

• 12.0
• 12.1
• 12.1.0
• 12.1.1
• 12.1.2
• 12.1.3
• 12.2
• 12.3
• 12.4
• 12.5
• 12.5.0
• 12.5.1
• 12.5.2
• 12.5.3
• 12.5.4
• 12.5.5
• 12.5.6
• 12.5.7
• 12.5.8
• 12.5.9
• 12.6
• 12.7
• 12.8.0

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion