WatchGuard SSO Client DoS Vulnerability (CVE-2024-6594) Advisory and POC

Vulnerability Overview A denial-of-service (DoS) vulnerability exists in the WatchGuard SSO client. An attacker can send malformed commands to the WatchGuard SSO client, causing it to crash. Affected Products Product: WatchGuard Active Directory Single Sign-On (SSO) Affected Versions: Single Sign-On Client <= 12.7 Fixed Versions: None Vulnerability Type: Denial of Service Security Risk: Medium Vendor URL: https://www.watchguard.com/ Vendor Status: Notified Advisory URL: https://www.redteam-pentesting.de/advisories/rt-sa-2024-008 Advisory Status: Published CVE: CVE-2024-6594 CVE URL: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-6594 Remediation No known fix is currently available. It is recommended to temporarily avoid using WatchGuard SSO functionality. Proof of Concept (POC) Code Timeline 2024-06-05: Vulnerability identified 2024-06-10: Customer approved disclosure to vendor 2024-06-20: Vendor notified 2024-06-27: Vendor confirmed receipt of report 2024-07-04: Requested vendor confirmation of vulnerability and provided timeline for resolution 2024-07-09: Vendor confirmed the vulnerability, stating a timeline would be provided at a later date 2024-08-08: Requested update, reminding vendor of the approximately 90-day responsible disclosure timeframe 2024-09-03: Requested update 2024-09-10: Requested update again, indicating plans to publish after 90 days 2024-09-16: Vendor announced advisory would be released the next day, without providing a fix timeline 2024-09-17: After negotiation with WatchGuard, the customer delayed advisory publication by one week to allow for mitigation implementation 2024-09-18: Confirmed new release date with WatchGuard 2024-09-25: Advisory published Security Risk Assessment An attacker can interrupt other users' network access or exploit this vulnerability to gain access for crashing memory dumps. Therefore, this vulnerability constitutes a medium risk.

Goal Reached Thanks to every supporter — we hit 100%!

WatchGuard SSO Client DoS Vulnerability (CVE-2024-6594) Advisory and POC