CVE-2022-23176

WatchGuard Firebox and XTM — WatchGuard Firebox and XTM Privilege Escalation Vulnerability
⚠️ CVSS 3.1  8.8 / 10 — HIGH 🔴 CISA Known Exploited Vulnerability

Overview

WatchGuard Firebox and XTM appliances allow a remote attacker with unprivileged credentials to access the system with a privileged management session via exposed management access.

https://nvd.nist.gov/vuln/detail/CVE-2022-23176

Key Details

PropertyValue
CVE ID CVE-2022-23176
Vendor / Product WatchGuard — Firebox and XTM
NVD Published2022-02-24
NVD Last Modified2025-11-03
CVSS 3.1 Score8.8
CVSS 3.1 VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
SeverityHIGH
CISA KEV Added2022-04-11
CISA KEV Deadline2022-05-02
Known Ransomware Use No

CVSS 3.1 Breakdown

Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High

Required Action

CISA BOD 22-01 Deadline: 2022-05-02. Apply updates per vendor instructions.

Timeline

DateEvent
2022-04-11Added to CISA Known Exploited Vulnerabilities catalog
2022-05-02CISA BOD 22-01 remediation deadline

References

ResourceType
NVD — CVE-2022-23176 Vulnerability Database
CISA KEV Catalog Entry US Government