Approved changes feed: RSS · Atom

cpe:2.3:h:watchguard:firebox_m570:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductFirebox M570 (46a4c56f-9863-5e76-a6c7-7df663a30e14)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-9242 not_vulnerable 2026-06-03 15:13:45.792505 WatchGuard Firebox iked Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.3 and 2025.1.
Published: 2025-09-17T07:29:23.738Z
Updated: 2026-02-26T17:48:28.750Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1071 not_vulnerable 2026-06-03 14:58:57.676503 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in spamBlocker Module
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the spamBlocker module. This vulnerability requires an authenticated administrator session to a locally managed Firebox.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.
Published: 2025-02-14T13:20:48.780Z
Updated: 2025-02-14T14:05:47.670Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-14733 not_vulnerable 2026-06-03 14:58:55.860945 WatchGuard Firebox iked Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to execute arbitrary code. This vulnerability affects both the Mobile User VPN with IKEv2 and the Branch Office VPN using IKEv2 when configured with a dynamic gateway peer.This vulnerability affects Fireware OS 11.10.2 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.5 and 2025.1 up to and including 2025.1.3.
Published: 2025-12-19T00:01:55.722Z
Updated: 2026-02-26T16:07:25.588Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-0178 not_vulnerable 2026-06-03 14:58:23.942310 WatchGaurd Firebox Host Header Injection Vulnerability
Improper Input Validation vulnerability in WatchGuard Fireware OS allows an attacker to manipulate the value of the HTTP Host header in requests sent to the Web UI. An attacker could exploit this vulnerability to redirect users to malicious websites, poison the web cache, or inject malicious JavaScript into responses sent by the Web UI. This issue affects Fireware OS: from 12.0 up to and including 12.11.
Published: 2025-02-14T13:22:22.237Z
Updated: 2025-02-14T14:01:35.532Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.