Summaryinfo

A vulnerability classified as critical has been found in WatchGuard XCS 9.2/10.0. Affected by this issue is some unknown functionality of the file borderpost/imp/compose.php3 of the component sid Cookie. Performing a manipulation results in sql injection. This vulnerability is identified as CVE-2015-5452. The attack can be initiated remotely. Additionally, an exploit exists. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in WatchGuard XCS 9.2/10.0. This affects some unknown processing of the file borderpost/imp/compose.php3 of the component sid Cookie. The manipulation with an unknown input leads to a sql injection vulnerability. CWE is classifying the issue as CWE-89. The product constructs all or part of an SQL command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended SQL command when it is sent to a downstream component. This is going to have an impact on confidentiality, integrity, and availability. The summary by CVE is:

SQL injection vulnerability in Watchguard XCS 9.2 and 10.0 before build 150522 allows remote attackers to execute arbitrary SQL commands via the sid cookie, as demonstrated by a request to borderpost/imp/compose.php3.

The weakness was released 07/08/2015 (Website). The advisory is shared at watchguard.com. This vulnerability is uniquely identified as CVE-2015-5452 since 07/08/2015. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known. MITRE ATT&CK project uses the attack technique T1505 for this issue.

A public exploit has been developed by Metasploit and been published 3 months after the advisory. The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 10.0 Build 150522 eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (38346) and SecurityFocus (BID 75516†). Entry connected to this vulnerability is available at VDB-76342. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Vendor

• WatchGuard

Name

• XCS

Version

• 9.2
• 10.0

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion