Vulnerability-Lookup

CVE-2025-0178 (GCVE-0-2025-0178)

Vulnerability from cvelistv5 – Published: 2025-02-14 13:22 – Updated: 2026-08-08 02:17

Title

WatchGaurd Firebox Host Header Injection Vulnerability

Summary

An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.

Severity

5.1 (Medium)


                        
                          CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L

SSVC

Exploitation: none Automatable: no Technical Impact: partial

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2025-02-14 14:01 UTC

CWE

CWE-20

Assigner

WatchGuard

References

2 references

URL	Tags
https://psirt.watchguard.com/CVE-2025-0178	vendor-advisory
https://www.watchguard.com/wgrd-psirt/advisory/wg…	vendor-advisory

Impacted products

2 products

Vendor	Product	Version
WatchGuard	Fireware OS	Affected: 12.0 , < 12.11.1 (custom)
WatchGuard	Fireware OS	Affected: 12.0 , < 12.5.13 (custom)

Date Public

2025-02-14 13:22

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-0178",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "partial"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-14T14:01:22.671243Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-14T14:01:35.532Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "Default"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThan": "12.11.1",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "platforms": [
            "T15/T35"
          ],
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThan": "12.5.13",
              "status": "affected",
              "version": "12.0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.11.1",
                  "versionStartIncluding": "12.0",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "12.5.13",
                  "versionStartIncluding": "12.0",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ],
          "operator": "OR"
        }
      ],
      "datePublic": "2025-02-14T13:22:22.237Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI."
        }
      ],
      "exploits": [
        {
          "lang": "en",
          "value": "WatchGuard is not aware of any exploitation of this vulnerability in the wild."
        }
      ],
      "metrics": [
        {
          "cvssV4_0": {
            "baseScore": 5.1,
            "baseSeverity": "MEDIUM",
            "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L",
            "version": "4.0"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-08T02:17:05.783Z",
        "orgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "shortName": "WatchGuard"
      },
      "references": [
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://psirt.watchguard.com/CVE-2025-0178"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "value": "Fireware OS 12.11.1, Fireware OS 12.5.13"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-09-17T00:00:00.000Z",
          "value": "Updated to add Fireware OS 12.5.13 as a resolved release"
        }
      ],
      "title": "WatchGaurd Firebox Host Header Injection Vulnerability"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
    "assignerShortName": "WatchGuard",
    "cveId": "CVE-2025-0178",
    "datePublished": "2025-02-14T13:22:22.237Z",
    "dateReserved": "2025-01-02T19:07:31.451Z",
    "dateUpdated": "2026-08-08T02:17:05.783Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2025-0178",
      "date": "2026-08-15",
      "epss": "0.00226",
      "percentile": "0.13621"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2025-0178\",\"sourceIdentifier\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"published\":\"2025-02-14T14:15:32.403\",\"lastModified\":\"2026-08-08T03:16:43.657\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.\"},{\"lang\":\"es\",\"value\":\"La vulnerabilidad de validaci\u00f3n de entrada incorrecta en WatchGuard Fireware OS permite a un atacante manipular el valor del encabezado de host HTTP en las solicitudes enviadas a la interfaz web. Un atacante podr\u00eda aprovechar esta vulnerabilidad para redirigir a los usuarios a sitios web maliciosos, envenenar la memoria cach\u00e9 web o inyectar JavaScript malicioso en las respuestas enviadas por la interfaz web. Este problema afecta al sistema operativo Fireware: desde la versi\u00f3n 12.0 hasta la 12.11 inclusive.\"}],\"affected\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"affectedData\":[{\"vendor\":\"WatchGuard\",\"product\":\"Fireware OS\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"Default\"],\"versions\":[{\"version\":\"12.0\",\"lessThan\":\"12.11.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"WatchGuard\",\"product\":\"Fireware OS\",\"defaultStatus\":\"unaffected\",\"platforms\":[\"T15/T35\"],\"versions\":[{\"version\":\"12.0\",\"lessThan\":\"12.5.13\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV40\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"4.0\",\"vectorString\":\"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X\",\"baseScore\":5.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"attackRequirements\":\"NONE\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"ACTIVE\",\"vulnConfidentialityImpact\":\"LOW\",\"vulnIntegrityImpact\":\"NONE\",\"vulnAvailabilityImpact\":\"NONE\",\"subConfidentialityImpact\":\"LOW\",\"subIntegrityImpact\":\"LOW\",\"subAvailabilityImpact\":\"LOW\",\"exploitMaturity\":\"NOT_DEFINED\",\"confidentialityRequirement\":\"NOT_DEFINED\",\"integrityRequirement\":\"NOT_DEFINED\",\"availabilityRequirement\":\"NOT_DEFINED\",\"modifiedAttackVector\":\"NOT_DEFINED\",\"modifiedAttackComplexity\":\"NOT_DEFINED\",\"modifiedAttackRequirements\":\"NOT_DEFINED\",\"modifiedPrivilegesRequired\":\"NOT_DEFINED\",\"modifiedUserInteraction\":\"NOT_DEFINED\",\"modifiedVulnConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedVulnIntegrityImpact\":\"NOT_DEFINED\",\"modifiedVulnAvailabilityImpact\":\"NOT_DEFINED\",\"modifiedSubConfidentialityImpact\":\"NOT_DEFINED\",\"modifiedSubIntegrityImpact\":\"NOT_DEFINED\",\"modifiedSubAvailabilityImpact\":\"NOT_DEFINED\",\"Safety\":\"NOT_DEFINED\",\"Automatable\":\"NOT_DEFINED\",\"Recovery\":\"NOT_DEFINED\",\"valueDensity\":\"NOT_DEFINED\",\"vulnerabilityResponseEffort\":\"NOT_DEFINED\",\"providerUrgency\":\"NOT_DEFINED\"}}],\"cvssMetricV31\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N\",\"baseScore\":6.1,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"REQUIRED\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"LOW\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":2.8,\"impactScore\":2.7}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-02-14T14:01:22.671243Z\",\"id\":\"CVE-2025-0178\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-20\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.0.0\",\"versionEndExcluding\":\"12.11.1\",\"matchCriteriaId\":\"E58F8CC6-6030-4F42-814C-33377C9547FE\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"DB00A42A-2065-4914-80CA-981E62DEC2CC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"22AC145E-2F33-4C0D-AA78-080CEA1980AB\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"80F83640-57E7-4DF8-A201-E8D5722EF978\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2F639188-7E3D-46B8-8443-5B1F32A3EC59\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BB643AE5-6432-474F-BCF9-7A92B907EDE1\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"08FC5CE7-00F5-40C4-877F-78D3DF6B01DC\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"04B14406-F7EC-4573-8AF0-BCCBA9BD1A15\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D10EFE3-0342-4670-AC73-011D08A4CBEA\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"68953F7A-9037-4848-9F7B-FD8E798CB761\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"413CB88D-9755-43BF-9D76-4252C7151A84\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"902C261B-AE76-4F2A-B660-2C069692E95D\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F3781D2E-80EF-4F6C-BBC3-7570940A5EBF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1D5FBFA4-219F-49F8-BD2C-415A621F6ED6\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"157A59B2-F420-4203-92C4-412685C51893\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"FFD1036B-87F5-4523-B67C-0DE6E9AACE32\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"8050A99B-C106-422D-9497-5E7C79FB89E0\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"7F2A1048-7830-4CEB-B6D1-4A4F0C10580F\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"F97AE5A0-E6E5-46BD-B05D-98E4253773F7\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"BD55ABF8-7C3C-476C-9A04-C889F3D8A21E\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"9882123D-992F-4BDA-8EE0-433A3AF62B54\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4D86B0B2-D05B-4361-A02A-C1FEE2F710DD\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"12.5\",\"versionEndExcluding\":\"12.5.13\",\"matchCriteriaId\":\"A9CA277E-9B7D-4816-A0DE-E9B94504C28A\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"CC78E84B-C17B-44C5-9427-5EF97B90A6EF\"},{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"12FED793-9DF3-46BB-AA64-3B1934123616\"}]}]}],\"references\":[{\"url\":\"https://psirt.watchguard.com/CVE-2025-0178\",\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\"},{\"url\":\"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003\",\"source\":\"5d1c2695-1a31-4499-88ae-e847036fd7e3\",\"tags\":[\"Vendor Advisory\"]}]}}",
    "redhat_vex": {
      "current_release_date": "2025-05-28T17:22:08+00:00",
      "cve": "CVE-2025-0178",
      "id": "CVE-2025-0178",
      "initial_release_date": "2025-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "WatchGaurd Firebox Host Header Injection Vulnerability",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-0178.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2025-0178\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-14T14:01:22.671243Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-14T14:01:29.749Z\"}}], \"cna\": {\"title\": \"WatchGaurd Firebox Host Header Injection Vulnerability\", \"metrics\": [{\"cvssV4_0\": {\"version\": \"4.0\", \"baseScore\": 5.1, \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L\"}}], \"affected\": [{\"vendor\": \"WatchGuard\", \"product\": \"Fireware OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.11.1\", \"versionType\": \"custom\"}], \"platforms\": [\"Default\"], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"WatchGuard\", \"product\": \"Fireware OS\", \"versions\": [{\"status\": \"affected\", \"version\": \"12.0\", \"lessThan\": \"12.5.13\", \"versionType\": \"custom\"}], \"platforms\": [\"T15/T35\"], \"defaultStatus\": \"unaffected\"}], \"exploits\": [{\"lang\": \"en\", \"value\": \"WatchGuard is not aware of any exploitation of this vulnerability in the wild.\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2025-09-17T00:00:00.000Z\", \"value\": \"Updated to add Fireware OS 12.5.13 as a resolved release\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Fireware OS 12.11.1, Fireware OS 12.5.13\"}], \"datePublic\": \"2025-02-14T13:22:22.237Z\", \"references\": [{\"url\": \"https://psirt.watchguard.com/CVE-2025-0178\", \"tags\": [\"vendor-advisory\"]}, {\"url\": \"https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003\", \"tags\": [\"vendor-advisory\"]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"An Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker with network access to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-20\", \"description\": \"CWE-20\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"negate\": false, \"cpeMatch\": [{\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.11.1\", \"versionStartIncluding\": \"12.0\"}, {\"criteria\": \"cpe:2.3:a:watchguard:fireware_os:*:*:*:*:*:*:*:*\", \"vulnerable\": true, \"versionEndExcluding\": \"12.5.13\", \"versionStartIncluding\": \"12.0\"}], \"operator\": \"OR\"}], \"operator\": \"OR\"}], \"providerMetadata\": {\"orgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"shortName\": \"WatchGuard\", \"dateUpdated\": \"2026-08-08T02:17:05.783Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2025-0178\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-08-08T02:17:05.783Z\", \"dateReserved\": \"2025-01-02T19:07:31.451Z\", \"assignerOrgId\": \"5d1c2695-1a31-4499-88ae-e847036fd7e3\", \"datePublished\": \"2025-02-14T13:22:22.237Z\", \"assignerShortName\": \"WatchGuard\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.2"
    }
  }
}

FKIE_CVE-2025-0178

Vulnerability from fkie_nvd - Published: 2025-02-14 14:15 - Updated: 2026-06-17 08:26

Severity

6.1 (Medium) - CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Summary

Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI. This issue affects Fireware OS: from 12.0 up to and including 12.11.

References

	URL	Tags
	5d1c2695-1a31-4499-88ae-e847036fd7e3	https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003	Vendor Advisory

Impacted products

Vendor	Product	Version
watchguard	fireware	*
watchguard	firebox_m270	*
watchguard	firebox_m290	*
watchguard	firebox_m370	*
watchguard	firebox_m390	*
watchguard	firebox_m440	*
watchguard	firebox_m4600	*
watchguard	firebox_m470	*
watchguard	firebox_m4800	*
watchguard	firebox_m5600	*
watchguard	firebox_m570	*
watchguard	firebox_m5800	*
watchguard	firebox_m590	*
watchguard	firebox_m670	*
watchguard	firebox_m690	*
watchguard	firebox_nv5	*
watchguard	firebox_t20	*
watchguard	firebox_t25	*
watchguard	firebox_t40	*
watchguard	firebox_t45	*
watchguard	firebox_t55	*
watchguard	firebox_t70	*
watchguard	firebox_t80	*
watchguard	firebox_t85	*
watchguard	fireboxcloud	*
watchguard	fireboxv	*
watchguard	fireware	*
watchguard	firebox_t15	*
watchguard	firebox_t35	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "product": "Fireware OS",
          "vendor": "WatchGuard",
          "versions": [
            {
              "lessThanOrEqual": "12.5.12+701324",
              "status": "affected",
              "version": "12.0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "12.11",
              "status": "affected",
              "version": "12.6.0",
              "versionType": "semver"
            }
          ]
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E58F8CC6-6030-4F42-814C-33377C9547FE",
              "versionEndExcluding": "12.11.1",
              "versionStartIncluding": "12.0.0",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m270:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "DB00A42A-2065-4914-80CA-981E62DEC2CC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m290:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "5FC5E2C2-B0E3-4879-9B7C-E6E84A7BEC4E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m370:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "22AC145E-2F33-4C0D-AA78-080CEA1980AB",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m390:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "80F83640-57E7-4DF8-A201-E8D5722EF978",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m440:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "2F639188-7E3D-46B8-8443-5B1F32A3EC59",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4600:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB643AE5-6432-474F-BCF9-7A92B907EDE1",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m470:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "08FC5CE7-00F5-40C4-877F-78D3DF6B01DC",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m4800:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "04B14406-F7EC-4573-8AF0-BCCBA9BD1A15",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5600:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D10EFE3-0342-4670-AC73-011D08A4CBEA",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "68953F7A-9037-4848-9F7B-FD8E798CB761",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m5800:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1A49CF31-D888-4DAE-B1D4-2E4E5A98B38A",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m590:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9F14FE4A-4C09-4B2E-8D2C-ECA03FC62595",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m670:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "413CB88D-9755-43BF-9D76-4252C7151A84",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_m690:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "902C261B-AE76-4F2A-B660-2C069692E95D",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_nv5:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F3781D2E-80EF-4F6C-BBC3-7570940A5EBF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t20:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1D5FBFA4-219F-49F8-BD2C-415A621F6ED6",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t25:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "157A59B2-F420-4203-92C4-412685C51893",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t40:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "FFD1036B-87F5-4523-B67C-0DE6E9AACE32",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t45:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CA4FE4DD-A364-4D3C-B84A-516AFC05F5A4",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t55:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "8050A99B-C106-422D-9497-5E7C79FB89E0",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t70:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "7F2A1048-7830-4CEB-B6D1-4A4F0C10580F",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t80:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "F97AE5A0-E6E5-46BD-B05D-98E4253773F7",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t85:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "BD55ABF8-7C3C-476C-9A04-C889F3D8A21E",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxcloud:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "9882123D-992F-4BDA-8EE0-433A3AF62B54",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:fireboxv:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "4D86B0B2-D05B-4361-A02A-C1FEE2F710DD",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "A9CA277E-9B7D-4816-A0DE-E9B94504C28A",
              "versionEndExcluding": "12.5.13",
              "versionStartIncluding": "12.5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t15:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "CC78E84B-C17B-44C5-9427-5EF97B90A6EF",
              "vulnerable": false
            },
            {
              "criteria": "cpe:2.3:h:watchguard:firebox_t35:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "12FED793-9DF3-46BB-AA64-3B1934123616",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.\nThis issue affects Fireware OS: from 12.0 up to and including 12.11."
    },
    {
      "lang": "es",
      "value": "La vulnerabilidad de validaci\u00f3n de entrada incorrecta en WatchGuard Fireware OS permite a un atacante manipular el valor del encabezado de host HTTP en las solicitudes enviadas a la interfaz web. Un atacante podr\u00eda aprovechar esta vulnerabilidad para redirigir a los usuarios a sitios web maliciosos, envenenar la memoria cach\u00e9 web o inyectar JavaScript malicioso en las respuestas enviadas por la interfaz web. Este problema afecta al sistema operativo Fireware: desde la versi\u00f3n 12.0 hasta la 12.11 inclusive."
    }
  ],
  "id": "CVE-2025-0178",
  "lastModified": "2026-06-17T08:26:01.390",
  "metrics": {
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "NONE",
          "baseScore": 6.1,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "LOW",
          "integrityImpact": "LOW",
          "privilegesRequired": "NONE",
          "scope": "CHANGED",
          "userInteraction": "REQUIRED",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
          "version": "3.1"
        },
        "exploitabilityScore": 2.8,
        "impactScore": 2.7,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ],
    "cvssMetricV40": [
      {
        "cvssData": {
          "Automatable": "NOT_DEFINED",
          "Recovery": "NOT_DEFINED",
          "Safety": "NOT_DEFINED",
          "attackComplexity": "LOW",
          "attackRequirements": "NONE",
          "attackVector": "NETWORK",
          "availabilityRequirement": "NOT_DEFINED",
          "baseScore": 5.1,
          "baseSeverity": "MEDIUM",
          "confidentialityRequirement": "NOT_DEFINED",
          "exploitMaturity": "NOT_DEFINED",
          "integrityRequirement": "NOT_DEFINED",
          "modifiedAttackComplexity": "NOT_DEFINED",
          "modifiedAttackRequirements": "NOT_DEFINED",
          "modifiedAttackVector": "NOT_DEFINED",
          "modifiedPrivilegesRequired": "NOT_DEFINED",
          "modifiedSubAvailabilityImpact": "NOT_DEFINED",
          "modifiedSubConfidentialityImpact": "NOT_DEFINED",
          "modifiedSubIntegrityImpact": "NOT_DEFINED",
          "modifiedUserInteraction": "NOT_DEFINED",
          "modifiedVulnAvailabilityImpact": "NOT_DEFINED",
          "modifiedVulnConfidentialityImpact": "NOT_DEFINED",
          "modifiedVulnIntegrityImpact": "NOT_DEFINED",
          "privilegesRequired": "NONE",
          "providerUrgency": "NOT_DEFINED",
          "subAvailabilityImpact": "LOW",
          "subConfidentialityImpact": "LOW",
          "subIntegrityImpact": "LOW",
          "userInteraction": "ACTIVE",
          "valueDensity": "NOT_DEFINED",
          "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
          "version": "4.0",
          "vulnAvailabilityImpact": "NONE",
          "vulnConfidentialityImpact": "LOW",
          "vulnIntegrityImpact": "NONE",
          "vulnerabilityResponseEffort": "NOT_DEFINED"
        },
        "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
        "type": "Secondary"
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2025-0178",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "timestamp": "2025-02-14T14:01:22.671243Z",
          "version": "2.0.3"
        }
      }
    ]
  },
  "published": "2025-02-14T14:15:32.403",
  "references": [
    {
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003"
    }
  ],
  "sourceIdentifier": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
  "vulnStatus": "Analyzed",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-20"
        }
      ],
      "source": "5d1c2695-1a31-4499-88ae-e847036fd7e3",
      "type": "Secondary"
    }
  ]
}

GHSA-4H8G-6MC6-VXXJ

Vulnerability from github – Published: 2025-02-14 15:31 – Updated: 2026-08-08 03:31

Details

Severity

6.1 (Medium)


                  
                    CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.1 (Medium)


                  
                    CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2025-0178"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-20"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2025-02-14T14:15:32Z",
    "severity": "MODERATE"
  },
  "details": "Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI.\nThis issue affects Fireware OS: from 12.0 up to and including 12.11.",
  "id": "GHSA-4h8g-6mc6-vxxj",
  "modified": "2026-08-08T03:31:09Z",
  "published": "2025-02-14T15:31:05Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2025-0178"
    },
    {
      "type": "WEB",
      "url": "https://psirt.watchguard.com/CVE-2025-0178"
    },
    {
      "type": "WEB",
      "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    },
    {
      "score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",
      "type": "CVSS_V4"
    }
  ]
}

WID-SEC-W-2025-0376

Vulnerability from csaf_certbund - Published: 2025-02-13 23:00 - Updated: 2025-02-13 23:00

Summary

WatchGuard Firebox: Mehrere Schwachstellen

Severity

Mittel

Notes

Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.

Produktbeschreibung: WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.

Angriff: Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuführen.

Betroffene Betriebssysteme: - BIOS/Firmware

CVE-2025-0178

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
WatchGuard Firebox Fireware OS <12.11.1 WatchGuard / Firebox		Fireware OS <12.11.1

CVE-2025-1071

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
WatchGuard Firebox Fireware OS <12.11.1 WatchGuard / Firebox		Fireware OS <12.11.1

CVE-2025-1239

Affected products

Known affected 1 product

Product	Identifier	Version	Remediation
WatchGuard Firebox Fireware OS <12.11.1 WatchGuard / Firebox		Fireware OS <12.11.1

References

5 references

URL	Category
https://wid.cert-bund.de/.well-known/csaf/white/2…	self
https://wid.cert-bund.de/portal/wid/securityadvis…	self
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external
https://www.watchguard.com/wgrd-psirt/advisory/wg…	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "text": "mittel"
    },
    "category": "csaf_base",
    "csaf_version": "2.0",
    "distribution": {
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "de-DE",
    "notes": [
      {
        "category": "legal_disclaimer",
        "text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
      },
      {
        "category": "description",
        "text": "WatchGuard Firebox ist ein Firewall bzw. Unified Threat Management Produkt.",
        "title": "Produktbeschreibung"
      },
      {
        "category": "summary",
        "text": "Ein anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in WatchGuard Firebox ausnutzen, um Daten zu manipulieren und Cross-Site-Scripting-Angriffe durchzuf\u00fchren.",
        "title": "Angriff"
      },
      {
        "category": "general",
        "text": "- BIOS/Firmware",
        "title": "Betroffene Betriebssysteme"
      }
    ],
    "publisher": {
      "category": "other",
      "contact_details": "csaf-provider@cert-bund.de",
      "name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
      "namespace": "https://www.bsi.bund.de"
    },
    "references": [
      {
        "category": "self",
        "summary": "WID-SEC-W-2025-0376 - CSAF Version",
        "url": "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0376.json"
      },
      {
        "category": "self",
        "summary": "WID-SEC-2025-0376 - Portal Version",
        "url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0376"
      },
      {
        "category": "external",
        "summary": "WatchGuard Advisory WGSA-2025-00001 vom 2025-02-13",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00001"
      },
      {
        "category": "external",
        "summary": "WatchGuard Advisory WGSA-2025-00002 vom 2025-02-13",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00002"
      },
      {
        "category": "external",
        "summary": "WatchGuard Advisory WGSA-2025-00003 vom 2025-02-13",
        "url": "https://www.watchguard.com/wgrd-psirt/advisory/wgsa-2025-00003"
      }
    ],
    "source_lang": "en-US",
    "title": "WatchGuard Firebox: Mehrere Schwachstellen",
    "tracking": {
      "current_release_date": "2025-02-13T23:00:00.000+00:00",
      "generator": {
        "date": "2025-02-14T11:51:49.339+00:00",
        "engine": {
          "name": "BSI-WID",
          "version": "1.3.12"
        }
      },
      "id": "WID-SEC-W-2025-0376",
      "initial_release_date": "2025-02-13T23:00:00.000+00:00",
      "revision_history": [
        {
          "date": "2025-02-13T23:00:00.000+00:00",
          "number": "1",
          "summary": "Initiale Fassung"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version_range",
                "name": "Fireware OS \u003c12.11.1",
                "product": {
                  "name": "WatchGuard Firebox Fireware OS \u003c12.11.1",
                  "product_id": "T041219"
                }
              },
              {
                "category": "product_version",
                "name": "Fireware OS 12.11.1",
                "product": {
                  "name": "WatchGuard Firebox Fireware OS 12.11.1",
                  "product_id": "T041219-fixed",
                  "product_identification_helper": {
                    "cpe": "cpe:/a:watchguard:firebox:fireware_os__12.11.1"
                  }
                }
              }
            ],
            "category": "product_name",
            "name": "Firebox"
          }
        ],
        "category": "vendor",
        "name": "WatchGuard"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-0178",
      "product_status": {
        "known_affected": [
          "T041219"
        ]
      },
      "release_date": "2025-02-13T23:00:00.000+00:00",
      "title": "CVE-2025-0178"
    },
    {
      "cve": "CVE-2025-1071",
      "product_status": {
        "known_affected": [
          "T041219"
        ]
      },
      "release_date": "2025-02-13T23:00:00.000+00:00",
      "title": "CVE-2025-1071"
    },
    {
      "cve": "CVE-2025-1239",
      "product_status": {
        "known_affected": [
          "T041219"
        ]
      },
      "release_date": "2025-02-13T23:00:00.000+00:00",
      "title": "CVE-2025-1239"
    }
  ]
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.

Action not permitted

CVE-2025-0178 (GCVE-0-2025-0178)

FKIE_CVE-2025-0178

GHSA-4H8G-6MC6-VXXJ

WID-SEC-W-2025-0376

Tags

Sightings

Nomenclature