Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WatchGuard Fireware v11.12.1 and earlier mishandles requests referring to an XML External Entity (XXE), in the XML-RPC agent. This causes the Firebox wgagent process to crash. This process crash ends all authenticated sessions to the Firebox, including management connections, and prevents new authenticated sessions until the process has recovered. The Firebox may also experience an overall degradation in performance while the wgagent process recovers. An attacker could continuously send XML-RPC requests that contain references to external entities to perform a limited Denial of Service (DoS) attack against an affected Firebox.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WatchGuard Fireware 安全漏洞
Vulnerability Description
WatchGuard Fireware XTM是美国WatchGuard公司的一款防火墙设备，该设备可通过智能分层技术提供入侵防护、垃圾病毒邮件过滤、SSL VPN等。WatchGuard Fireware是其中的固件。 WatchGuard Fireware 11.12.1及之前的版本中存在安全漏洞，该漏洞源于程序没有正确的处理涉及到XML外部实体的请求。攻击者可利用该漏洞实施拒绝服务攻击，造成Firebox wgagent进程崩溃。
CVSS Information
N/A
Vulnerability Type
N/A