VYPR
← All advisories
High severity7.5NVD Advisory· Published Dec 4, 2025· Updated Aug 10, 2026

CVE-2025-1545

CVE-2025-1545

Description

An XPath Injection vulnerability in WatchGuard Fireware OS may allow a remote unauthenticated attacker to retrieve sensitive information from the Firebox configuration through an exposed authentication or management web interface. This vulnerability only affects Firebox systems that have at least one authentication hotspot configured.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • WatchGuard/Fireware3 versions
    cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:watchguard:fireware:*:*:*:*:*:*:*:*range: >=2025.1,<2025.1.3
    • (no CPE)range: 11.11 to 11.12.4+541730, 12.0 to 12.11.4, 12.5 to 12.5.13, 2025.1 to 2025.1.2
    • (no CPE)range: 11.11

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.