Unrated severityCISA KEVNVD Advisory· Published Feb 24, 2022· Updated Oct 21, 2025
CVE-2022-23176
CVE-2022-23176
Description
WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access. This vulnerability impacts Fireware OS before 12.7.2_U1, 12.x before 12.1.3_U3, and 12.2.x through 12.5.x before 12.5.7_U3.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WatchGuard/Firebox and XTM appliancesdescription
- Range: <12.7.2_U1, <12.1.3_U3, <12.5.7_U3
Patches
Vulnerability mechanics
References
5- arstechnica.com/information-technology/2022/04/watchguard-failed-to-disclose-critical-flaw-exploited-by-russian-hackers/mitrex_refsource_MISC
- securityportal.watchguard.commitrex_refsource_MISC
- www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_1_3_U7/index.htmlmitrex_refsource_MISC
- www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7/index.htmlmitrex_refsource_CONFIRM
- www.watchguard.com/support/release-notes/fireware/12/en-US/EN_ReleaseNotes_Fireware_12_7_2/index.htmlmitrex_refsource_MISC
News mentions
0No linked articles in our index yet.