CVE-2022-23176
WatchGuard Firebox and XTM Privilege Escalation Vulnerability
WatchGuard Firebox and XTMNetwork & edge
CVSS
8.8HighExploit odds (EPSS)10.8%Chance of exploitation activity in the next 30 days, higher than 95% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
CISA required actionApply updates per vendor instructions. CISA KEV
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Timeline
Description
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.
Text from CVE List
Affected versions 1
- n/aaffected: n/aCVE List
References 7
- watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7/index.html#Fireware/en-US/resolved_issues.htmlFixvia CVE List
- watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.html#Fireware/en-US/resolved_issues.htmlFixvia CVE List
- watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_1_3_U7/index.html#Fireware/en-US/resolved_issues.htmlFixvia CVE List
- securityportal.watchguard.com/Advisoryvia CVE List
- nvd.nist.gov/vuln/detail/CVE-2022-23176Referencevia CISA KEV
- arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/Referencevia CVE List
- cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-23176Referencevia CVE List