CVE-2022-31790

PoC —

CVSS 3.1

7.5 high

EPSS

2%p79

Published

Sep 6, 2022 (Sep 6, 2022)

Modified

Jun 17, 2026

Description

WatchGuard Firebox and XTM appliances allow an unauthenticated remote attacker to retrieve sensitive authentication server settings by sending a malicious request to exposed authentication endpoints. This is fixed in Fireware OS 12.8.1, 12.5.10, and 12.1.4.

Vendors: watchguard
Products: fireware
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.