CVE-2022-23176—WatchGuard Firebox and XTM Privilege Escalation Vulnerability

PUBLISHEDvulnerability record

2022-04-11 · last modified June 21, 2025

Metadata

CVE ID:: CVE-2022-23176
Project:: WatchGuard
Product:: Firebox and XTM
Date Added:: 2022-04-11
Due Date:: 2022-05-02
Last Updated:: June 21, 2025

Vulnerability Name

WatchGuard Firebox and XTM Privilege Escalation Vulnerability

Description

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:: Unknown

Action

Apply updates per vendor instructions.