Approved changes feed: RSS · Atom

cpe:2.3:h:watchguard:firebox_t35:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorWatchguard (ec468727-86da-5bb0-9483-b62749e25478)
ProductFirebox T35 (e64f6b84-c7a7-5604-b927-e1f2fb31fbd4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-3344 not_vulnerable 2026-06-08 08:01:18.484082 WatchGuard Firebox System Integrity Check Bypass
A vulnerability in WatchGuard Fireware OS may allow an attacker to bypass the Fireware OS filesystem integrity check and maintain limited persistence via a maliciously-crafted firmware update package.This issue affects Fireware OS 12.0 up to and including 12.11.7, 12.5.9 up to and including 12.5.16, and 2025.1 up to and including 2026.1.1.
Published: 2026-03-03T13:17:56.622Z
Updated: 2026-03-04T15:22:41.878Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-3342 not_vulnerable 2026-06-08 08:01:18.435003 WatchGuard Firebox Out of Bounds Write Vulnerability
An Out-of-bounds Write vulnerability in WatchGuard Fireware OS may allow an authenticated privileged administrator to execute arbitrary code with root permissions via an exposed management interface. This vulnerability affects Fireware OS 11.9 up to and including 11.12.4_Update1, 12.0 up to and including 12.11.7 and 2025.1 up to and including 2026.1.1.
Published: 2026-03-03T13:17:39.376Z
Updated: 2026-03-04T15:22:14.651Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-6946 not_vulnerable 2026-06-08 07:43:16.709237 WatchGuard Firebox Stored Cross-Site-Scripting (XSS) Vulnerability in IPS Configuration
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in WatchGuard Fireware OS allows Stored XSS via the IPS module. This vulnerability requires an authenticated administrator session to a locally managed Firebox. This issue affects Firebox: from 12.0 through 12.11.2.
Published: 2025-12-04T21:48:50.477Z
Updated: 2025-12-05T15:43:06.306Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1547 not_vulnerable 2026-06-08 07:08:37.261990 WatchGuard Firebox Authenticated Stack Overflow in Certificate Request Command
A stack-based buffer overflow vulnerability [CWE-121] in WatchGuard Fireware OS's certificate request command could allow an authenticated privileged user to execute arbitrary code via specially crafted CLI commands.This issue affects Fireware OS: from 12.0 through 12.5.12+701324, from 12.6 through 12.11.2.
Published: 2025-12-04T22:11:09.164Z
Updated: 2026-02-26T16:57:31.557Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1545 not_vulnerable 2026-06-08 07:08:37.256731 WatchGuard Firebox XPath Injection Vulnerability in Web CGI
An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.This issue affects Fireware OS 11.11 up to and including 11.12.4+541730, 12.0 up to and including 12.11.4, 12.5 up to and including 12.5.13, and 2025.1 up to and including 2025.1.2.
Published: 2025-12-04T21:48:27.311Z
Updated: 2025-12-05T15:44:01.830Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13939 not_vulnerable 2026-06-08 07:06:33.098053 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13938 not_vulnerable 2026-06-08 07:06:33.043972 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13937 not_vulnerable 2026-06-08 07:06:33.040915 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13936 not_vulnerable 2026-06-08 07:06:33.032587 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12196 not_vulnerable 2026-06-08 07:04:29.829818 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12195 not_vulnerable 2026-06-08 07:04:29.826638 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-12026 not_vulnerable 2026-06-08 07:04:29.579800 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5974 not_vulnerable 2026-06-08 06:56:18.136470 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-25361 not_vulnerable 2026-06-08 05:41:45.809401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.